Edit tour

Windows Analysis Report
https://na2.docusign.net/member/Images/email/docInvite-white.png

Overview

General Information

Sample URL:	https://na2.docusign.net/member/Images/email/docInvite-white.png
Analysis ID:	1541355
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4324 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5292 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2484 --field-trial-handle=2360,i,17170980348293624299,15076630514375485401,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4024 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://na2.docusign.net/member/Images/email/docInvite-white.png" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 3592Host: login.live.com

Source: sets.json.0.dr	String found in binary or memory: https://07c225f3.online
Source: sets.json.0.dr	String found in binary or memory: https://24.hu
Source: sets.json.0.dr	String found in binary or memory: https://aajtak.in
Source: sets.json.0.dr	String found in binary or memory: https://abczdrowie.pl
Source: sets.json.0.dr	String found in binary or memory: https://alice.tw
Source: sets.json.0.dr	String found in binary or memory: https://ambitionbox.com
Source: sets.json.0.dr	String found in binary or memory: https://autobild.de
Source: sets.json.0.dr	String found in binary or memory: https://baomoi.com
Source: sets.json.0.dr	String found in binary or memory: https://bild.de
Source: sets.json.0.dr	String found in binary or memory: https://blackrock.com
Source: sets.json.0.dr	String found in binary or memory: https://blackrockadvisorelite.it
Source: sets.json.0.dr	String found in binary or memory: https://bluradio.com
Source: sets.json.0.dr	String found in binary or memory: https://bolasport.com
Source: sets.json.0.dr	String found in binary or memory: https://bonvivir.com
Source: sets.json.0.dr	String found in binary or memory: https://bumbox.com
Source: sets.json.0.dr	String found in binary or memory: https://businessinsider.com.pl
Source: sets.json.0.dr	String found in binary or memory: https://businesstoday.in
Source: sets.json.0.dr	String found in binary or memory: https://cachematrix.com
Source: sets.json.0.dr	String found in binary or memory: https://cafemedia.com
Source: sets.json.0.dr	String found in binary or memory: https://caracoltv.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.be
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.fr
Source: sets.json.0.dr	String found in binary or memory: https://cardsayings.net
Source: sets.json.0.dr	String found in binary or memory: https://chatbot.com
Source: sets.json.0.dr	String found in binary or memory: https://chennien.com
Source: sets.json.0.dr	String found in binary or memory: https://citybibleforum.org
Source: sets.json.0.dr	String found in binary or memory: https://clarosports.com
Source: sets.json.0.dr	String found in binary or memory: https://clmbtech.com
Source: sets.json.0.dr	String found in binary or memory: https://closeronline.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://clubelpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://cmxd.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://cognitive-ai.ru
Source: sets.json.0.dr	String found in binary or memory: https://cognitiveai.ru
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.com
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.net
Source: sets.json.0.dr	String found in binary or memory: https://computerbild.de
Source: sets.json.0.dr	String found in binary or memory: https://content-loader.com
Source: sets.json.0.dr	String found in binary or memory: https://cookreactor.com
Source: sets.json.0.dr	String found in binary or memory: https://cricbuzz.com
Source: sets.json.0.dr	String found in binary or memory: https://css-load.com
Source: sets.json.0.dr	String found in binary or memory: https://deccoria.pl
Source: sets.json.0.dr	String found in binary or memory: https://deere.com
Source: sets.json.0.dr	String found in binary or memory: https://desimartini.com
Source: sets.json.0.dr	String found in binary or memory: https://dewarmsteweek.be
Source: sets.json.0.dr	String found in binary or memory: https://drimer.io
Source: sets.json.0.dr	String found in binary or memory: https://drimer.travel
Source: sets.json.0.dr	String found in binary or memory: https://economictimes.com
Source: sets.json.0.dr	String found in binary or memory: https://een.be
Source: sets.json.0.dr	String found in binary or memory: https://efront.com
Source: sets.json.0.dr	String found in binary or memory: https://eleconomista.net
Source: sets.json.0.dr	String found in binary or memory: https://elfinancierocr.com
Source: sets.json.0.dr	String found in binary or memory: https://elgrafico.com
Source: sets.json.0.dr	String found in binary or memory: https://ella.sv
Source: sets.json.0.dr	String found in binary or memory: https://elpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://elpais.uy
Source: sets.json.0.dr	String found in binary or memory: https://etfacademy.it
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookcloud.com
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookrequest.com
Source: sets.json.0.dr	String found in binary or memory: https://fakt.pl
Source: sets.json.0.dr	String found in binary or memory: https://finn.no
Source: sets.json.0.dr	String found in binary or memory: https://firstlook.biz
Source: sets.json.0.dr	String found in binary or memory: https://gallito.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://geforcenow.com
Source: sets.json.0.dr	String found in binary or memory: https://gettalkdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://gliadomain.com
Source: sets.json.0.dr	String found in binary or memory: https://gnttv.com
Source: sets.json.0.dr	String found in binary or memory: https://graziadaily.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://grid.id
Source: sets.json.0.dr	String found in binary or memory: https://gridgames.app
Source: sets.json.0.dr	String found in binary or memory: https://growthrx.in
Source: sets.json.0.dr	String found in binary or memory: https://grupolpg.sv
Source: sets.json.0.dr	String found in binary or memory: https://gujaratijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://hapara.com
Source: sets.json.0.dr	String found in binary or memory: https://hazipatika.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.global
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.global
Source: sets.json.0.dr	String found in binary or memory: https://healthshots.com
Source: sets.json.0.dr	String found in binary or memory: https://hearty.app
Source: sets.json.0.dr	String found in binary or memory: https://hearty.gift
Source: sets.json.0.dr	String found in binary or memory: https://hearty.me
Source: sets.json.0.dr	String found in binary or memory: https://heartymail.com
Source: sets.json.0.dr	String found in binary or memory: https://heatworld.com
Source: sets.json.0.dr	String found in binary or memory: https://helpdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://hindustantimes.com
Source: sets.json.0.dr	String found in binary or memory: https://hj.rs
Source: sets.json.0.dr	String found in binary or memory: https://hjck.com
Source: sets.json.0.dr	String found in binary or memory: https://html-load.cc
Source: sets.json.0.dr	String found in binary or memory: https://html-load.com
Source: sets.json.0.dr	String found in binary or memory: https://human-talk.org
Source: sets.json.0.dr	String found in binary or memory: https://idbs-cloud.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-dev.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-eworkbook.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-staging.com
Source: sets.json.0.dr	String found in binary or memory: https://img-load.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatimes.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatoday.in
Source: sets.json.0.dr	String found in binary or memory: https://indiatodayne.in
Source: sets.json.0.dr	String found in binary or memory: https://infoedgeindia.com
Source: sets.json.0.dr	String found in binary or memory: https://interia.pl
Source: sets.json.0.dr	String found in binary or memory: https://intoday.in
Source: sets.json.0.dr	String found in binary or memory: https://iolam.it
Source: sets.json.0.dr	String found in binary or memory: https://ishares.com
Source: sets.json.0.dr	String found in binary or memory: https://jagran.com
Source: sets.json.0.dr	String found in binary or memory: https://johndeere.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.fr
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.fr
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.com
Source: sets.json.0.dr	String found in binary or memory: https://kaksya.in
Source: sets.json.0.dr	String found in binary or memory: https://knowledgebase.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.tv
Source: sets.json.0.dr	String found in binary or memory: https://kompasiana.com
Source: sets.json.0.dr	String found in binary or memory: https://lanacion.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.com
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.ru
Source: sets.json.0.dr	String found in binary or memory: https://laprensagrafica.com
Source: sets.json.0.dr	String found in binary or memory: https://lateja.cr
Source: sets.json.0.dr	String found in binary or memory: https://libero.it
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.com
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.fr
Source: sets.json.0.dr	String found in binary or memory: https://livechat.com
Source: sets.json.0.dr	String found in binary or memory: https://livechatinc.com
Source: sets.json.0.dr	String found in binary or memory: https://livehindustan.com
Source: sets.json.0.dr	String found in binary or memory: https://livemint.com
Source: sets.json.0.dr	String found in binary or memory: https://max.auto
Source: sets.json.0.dr	String found in binary or memory: https://medonet.pl
Source: sets.json.0.dr	String found in binary or memory: https://meo.pt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.co.cr
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.bo
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.do
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.gt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.hn
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ni
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pa
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.py
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.sv
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mighty-app.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://mightytext.net
Source: sets.json.0.dr	String found in binary or memory: https://mittanbud.no
Source: sets.json.0.dr	String found in binary or memory: https://money.pl
Source: sets.json.0.dr	String found in binary or memory: https://motherandbaby.com
Source: sets.json.0.dr	String found in binary or memory: https://mystudentdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://nacion.com
Source: sets.json.0.dr	String found in binary or memory: https://naukri.com
Source: sets.json.0.dr	String found in binary or memory: https://nidhiacademyonline.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.co
Source: sets.json.0.dr	String found in binary or memory: https://nien.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.org
Source: sets.json.0.dr	String found in binary or memory: https://nlc.hu
Source: sets.json.0.dr	String found in binary or memory: https://nosalty.hu
Source: sets.json.0.dr	String found in binary or memory: https://noticiascaracol.com
Source: sets.json.0.dr	String found in binary or memory: https://nourishingpursuits.com
Source: sets.json.0.dr	String found in binary or memory: https://nvidia.com
Source: sets.json.0.dr	String found in binary or memory: https://o2.pl
Source: sets.json.0.dr	String found in binary or memory: https://ocdn.eu
Source: sets.json.0.dr	String found in binary or memory: https://onet.pl
Source: sets.json.0.dr	String found in binary or memory: https://ottplay.com
Source: sets.json.0.dr	String found in binary or memory: https://p106.net
Source: sets.json.0.dr	String found in binary or memory: https://p24.hu
Source: sets.json.0.dr	String found in binary or memory: https://paula.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://pdmp-apis.no
Source: sets.json.0.dr	String found in binary or memory: https://phonandroid.com
Source: sets.json.0.dr	String found in binary or memory: https://player.pl
Source: sets.json.0.dr	String found in binary or memory: https://plejada.pl
Source: sets.json.0.dr	String found in binary or memory: https://poalim.site
Source: sets.json.0.dr	String found in binary or memory: https://poalim.xyz
Source: sets.json.0.dr	String found in binary or memory: https://pomponik.pl
Source: sets.json.0.dr	String found in binary or memory: https://portalinmobiliario.com
Source: sets.json.0.dr	String found in binary or memory: https://prisjakt.no
Source: sets.json.0.dr	String found in binary or memory: https://pudelek.pl
Source: sets.json.0.dr	String found in binary or memory: https://punjabijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://radio1.be
Source: sets.json.0.dr	String found in binary or memory: https://radio2.be
Source: sets.json.0.dr	String found in binary or memory: https://reactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://repid.org
Source: sets.json.0.dr	String found in binary or memory: https://reshim.org
Source: sets.json.0.dr	String found in binary or memory: https://rws1nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws2nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws3nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://sackrace.ai
Source: sets.json.0.dr	String found in binary or memory: https://salemoveadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovefinancial.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovetravel.com
Source: sets.json.0.dr	String found in binary or memory: https://samayam.com
Source: sets.json.0.dr	String found in binary or memory: https://sapo.io
Source: sets.json.0.dr	String found in binary or memory: https://sapo.pt
Source: sets.json.0.dr	String found in binary or memory: https://shock.co
Source: sets.json.0.dr	String found in binary or memory: https://smaker.pl
Source: sets.json.0.dr	String found in binary or memory: https://smoney.vn
Source: sets.json.0.dr	String found in binary or memory: https://smpn106jkt.sch.id
Source: sets.json.0.dr	String found in binary or memory: https://socket-to-me.vip
Source: sets.json.0.dr	String found in binary or memory: https://songshare.com
Source: sets.json.0.dr	String found in binary or memory: https://songstats.com
Source: sets.json.0.dr	String found in binary or memory: https://sporza.be
Source: sets.json.0.dr	String found in binary or memory: https://standardsandpraiserepurpose.com
Source: sets.json.0.dr	String found in binary or memory: https://startlap.hu
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.com
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.net
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.org
Source: sets.json.0.dr	String found in binary or memory: https://stripe.com
Source: sets.json.0.dr	String found in binary or memory: https://stripe.network
Source: sets.json.0.dr	String found in binary or memory: https://stripecdn.com
Source: sets.json.0.dr	String found in binary or memory: https://supereva.it
Source: sets.json.0.dr	String found in binary or memory: https://takeabreak.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskqaid.com
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskstgid.com
Source: sets.json.0.dr	String found in binary or memory: https://teacherdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://technology-revealed.com
Source: sets.json.0.dr	String found in binary or memory: https://terazgotuje.pl
Source: sets.json.0.dr	String found in binary or memory: https://text.com
Source: sets.json.0.dr	String found in binary or memory: https://textyserver.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://the42.ie
Source: sets.json.0.dr	String found in binary or memory: https://thejournal.ie
Source: sets.json.0.dr	String found in binary or memory: https://thirdspace.org.au
Source: sets.json.0.dr	String found in binary or memory: https://timesinternet.in
Source: sets.json.0.dr	String found in binary or memory: https://timesofindia.com
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.app
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.com
Source: sets.json.0.dr	String found in binary or memory: https://top.pl
Source: sets.json.0.dr	String found in binary or memory: https://tribunnews.com
Source: sets.json.0.dr	String found in binary or memory: https://trytalkdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.co
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://tvid.in
Source: sets.json.0.dr	String found in binary or memory: https://tvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://tvn24.pl
Source: sets.json.0.dr	String found in binary or memory: https://unotv.com
Source: sets.json.0.dr	String found in binary or memory: https://victorymedium.com
Source: sets.json.0.dr	String found in binary or memory: https://vrt.be
Source: sets.json.0.dr	String found in binary or memory: https://vwo.com
Source: sets.json.0.dr	String found in binary or memory: https://welt.de
Source: sets.json.0.dr	String found in binary or memory: https://wieistmeineip.de
Source: sets.json.0.dr	String found in binary or memory: https://wildix.com
Source: sets.json.0.dr	String found in binary or memory: https://wildixin.com
Source: sets.json.0.dr	String found in binary or memory: https://wingify.com
Source: sets.json.0.dr	String found in binary or memory: https://wordle.at
Source: sets.json.0.dr	String found in binary or memory: https://wp.pl
Source: sets.json.0.dr	String found in binary or memory: https://wpext.pl
Source: sets.json.0.dr	String found in binary or memory: https://www.asadcdn.com
Source: sets.json.0.dr	String found in binary or memory: https://ya.ru
Source: sets.json.0.dr	String found in binary or memory: https://yours.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://zalo.me
Source: sets.json.0.dr	String found in binary or memory: https://zdrowietvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://zingmp3.vn

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936

Source: unknown	HTTPS traffic detected: 40.126.32.74:443 -> 192.168.2.5:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.32.133:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.5:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.5:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.5:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.5:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.5:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.5:49912 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.5:49913 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.5:49929 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.5:49959 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.5:52052 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.5:52053 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4324_1198034603	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4324_1198034603\sets.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4324_1198034603\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4324_1198034603\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4324_1198034603\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4324_1198034603\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4324_1198034603\manifest.fingerprint	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\chrome_BITS_4324_396327744

Jump to behavior

Source: classification engine

Classification label: clean2.win@17/16@8/3

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2484 --field-trial-handle=2360,i,17170980348293624299,15076630514375485401,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://na2.docusign.net/member/Images/email/docInvite-white.png"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2484 --field-trial-handle=2360,i,17170980348293624299,15076630514375485401,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	11 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://wieistmeineip.de	0%	URL Reputation	safe
https://mercadoshops.com.co	0%	URL Reputation	safe
https://gliadomain.com	0%	URL Reputation	safe
https://poalim.xyz	0%	URL Reputation	safe
https://mercadolivre.com	0%	URL Reputation	safe
https://reshim.org	0%	URL Reputation	safe
https://nourishingpursuits.com	0%	URL Reputation	safe
https://medonet.pl	0%	URL Reputation	safe
https://unotv.com	0%	URL Reputation	safe
https://mercadoshops.com.br	0%	URL Reputation	safe
https://zdrowietvn.pl	0%	URL Reputation	safe
https://johndeere.com	0%	URL Reputation	safe
https://songstats.com	0%	URL Reputation	safe
https://baomoi.com	0%	URL Reputation	safe
https://supereva.it	0%	URL Reputation	safe
https://elfinancierocr.com	0%	URL Reputation	safe
https://bolasport.com	0%	URL Reputation	safe
https://rws1nvtvt.com	0%	URL Reputation	safe
https://desimartini.com	0%	URL Reputation	safe
https://hearty.app	0%	URL Reputation	safe
https://hearty.gift	0%	URL Reputation	safe
https://mercadoshops.com	0%	URL Reputation	safe
https://heartymail.com	0%	URL Reputation	safe
https://p106.net	0%	URL Reputation	safe
https://radio2.be	0%	URL Reputation	safe
https://finn.no	0%	URL Reputation	safe
https://hc1.com	0%	URL Reputation	safe
https://kompas.tv	0%	URL Reputation	safe
https://mystudentdashboard.com	0%	URL Reputation	safe
https://songshare.com	0%	URL Reputation	safe
https://smaker.pl	0%	URL Reputation	safe
https://mercadopago.com.mx	0%	URL Reputation	safe
https://p24.hu	0%	URL Reputation	safe
https://talkdeskqaid.com	0%	URL Reputation	safe
https://mercadopago.com.pe	0%	URL Reputation	safe
https://cardsayings.net	0%	URL Reputation	safe
https://mightytext.net	0%	URL Reputation	safe
https://pudelek.pl	0%	URL Reputation	safe
https://hazipatika.com	0%	URL Reputation	safe
https://joyreactor.com	0%	URL Reputation	safe
https://cookreactor.com	0%	URL Reputation	safe
https://wildixin.com	0%	URL Reputation	safe
https://eworkbookcloud.com	0%	URL Reputation	safe
https://cognitiveai.ru	0%	URL Reputation	safe
https://nacion.com	0%	URL Reputation	safe
https://chennien.com	0%	URL Reputation	safe
https://drimer.travel	0%	URL Reputation	safe
https://deccoria.pl	0%	URL Reputation	safe
https://mercadopago.cl	0%	URL Reputation	safe
https://talkdeskstgid.com	0%	URL Reputation	safe
https://bonvivir.com	0%	URL Reputation	safe
https://carcostadvisor.be	0%	URL Reputation	safe
https://salemovetravel.com	0%	URL Reputation	safe
https://sapo.io	0%	URL Reputation	safe
https://wpext.pl	0%	URL Reputation	safe
https://welt.de	0%	URL Reputation	safe
https://poalim.site	0%	URL Reputation	safe
https://drimer.io	0%	URL Reputation	safe
https://infoedgeindia.com	0%	URL Reputation	safe
https://blackrockadvisorelite.it	0%	URL Reputation	safe
https://cognitive-ai.ru	0%	URL Reputation	safe
https://cafemedia.com	0%	URL Reputation	safe
https://graziadaily.co.uk	0%	URL Reputation	safe
https://thirdspace.org.au	0%	URL Reputation	safe
https://mercadoshops.com.ar	0%	URL Reputation	safe
https://smpn106jkt.sch.id	0%	URL Reputation	safe
https://elpais.uy	0%	URL Reputation	safe
https://landyrev.com	0%	URL Reputation	safe
https://commentcamarche.com	0%	URL Reputation	safe
https://tucarro.com.ve	0%	URL Reputation	safe
https://rws3nvtvt.com	0%	URL Reputation	safe
https://eleconomista.net	0%	URL Reputation	safe
https://mercadolivre.com.br	0%	URL Reputation	safe
https://clmbtech.com	0%	URL Reputation	safe
https://standardsandpraiserepurpose.com	0%	URL Reputation	safe
https://salemovefinancial.com	0%	URL Reputation	safe
https://mercadopago.com.br	0%	URL Reputation	safe
https://commentcamarche.net	0%	URL Reputation	safe
https://etfacademy.it	0%	URL Reputation	safe
https://mighty-app.appspot.com	0%	URL Reputation	safe
https://hj.rs	0%	URL Reputation	safe
https://hearty.me	0%	URL Reputation	safe
https://mercadolibre.com.gt	0%	URL Reputation	safe
https://timesinternet.in	0%	URL Reputation	safe
https://indiatodayne.in	0%	URL Reputation	safe
https://idbs-staging.com	0%	URL Reputation	safe
https://blackrock.com	0%	URL Reputation	safe
https://idbs-eworkbook.com	0%	URL Reputation	safe
https://motherandbaby.com	0%	URL Reputation	safe
https://mercadolibre.co.cr	0%	URL Reputation	safe
https://hjck.com	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.google.com	172.217.16.196	true	false	unknown
docucdn-a.akamaihd.net	unknown	unknown	false	unknown
na2.docusign.net	unknown	unknown	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://wieistmeineip.de	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.co	sets.json.0.dr	false	URL Reputation: safe	unknown
https://gliadomain.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://poalim.xyz	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadolivre.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://reshim.org	sets.json.0.dr	false	URL Reputation: safe	unknown
https://nourishingpursuits.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://medonet.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://unotv.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.br	sets.json.0.dr	false	URL Reputation: safe	unknown
https://joyreactor.cc	sets.json.0.dr	false		unknown
https://zdrowietvn.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://johndeere.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://songstats.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://baomoi.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://supereva.it	sets.json.0.dr	false	URL Reputation: safe	unknown
https://elfinancierocr.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://bolasport.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://rws1nvtvt.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://desimartini.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hearty.app	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hearty.gift	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://heartymail.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://nlc.hu	sets.json.0.dr	false		unknown
https://p106.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://radio2.be	sets.json.0.dr	false	URL Reputation: safe	unknown
https://finn.no	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hc1.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://kompas.tv	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mystudentdashboard.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://songshare.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://smaker.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadopago.com.mx	sets.json.0.dr	false	URL Reputation: safe	unknown
https://p24.hu	sets.json.0.dr	false	URL Reputation: safe	unknown
https://talkdeskqaid.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://24.hu	sets.json.0.dr	false		unknown
https://mercadopago.com.pe	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cardsayings.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://text.com	sets.json.0.dr	false		unknown
https://mightytext.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://pudelek.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hazipatika.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://joyreactor.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cookreactor.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://wildixin.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://eworkbookcloud.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cognitiveai.ru	sets.json.0.dr	false	URL Reputation: safe	unknown
https://nacion.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://chennien.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://drimer.travel	sets.json.0.dr	false	URL Reputation: safe	unknown
https://deccoria.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadopago.cl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://talkdeskstgid.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://naukri.com	sets.json.0.dr	false		unknown
https://interia.pl	sets.json.0.dr	false		unknown
https://bonvivir.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://carcostadvisor.be	sets.json.0.dr	false	URL Reputation: safe	unknown
https://salemovetravel.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://sapo.io	sets.json.0.dr	false	URL Reputation: safe	unknown
https://wpext.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://welt.de	sets.json.0.dr	false	URL Reputation: safe	unknown
https://poalim.site	sets.json.0.dr	false	URL Reputation: safe	unknown
https://drimer.io	sets.json.0.dr	false	URL Reputation: safe	unknown
https://infoedgeindia.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://blackrockadvisorelite.it	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cognitive-ai.ru	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cafemedia.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://graziadaily.co.uk	sets.json.0.dr	false	URL Reputation: safe	unknown
https://thirdspace.org.au	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.ar	sets.json.0.dr	false	URL Reputation: safe	unknown
https://smpn106jkt.sch.id	sets.json.0.dr	false	URL Reputation: safe	unknown
https://elpais.uy	sets.json.0.dr	false	URL Reputation: safe	unknown
https://landyrev.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://the42.ie	sets.json.0.dr	false		unknown
https://commentcamarche.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://tucarro.com.ve	sets.json.0.dr	false	URL Reputation: safe	unknown
https://rws3nvtvt.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://eleconomista.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://helpdesk.com	sets.json.0.dr	false		unknown
https://mercadolivre.com.br	sets.json.0.dr	false	URL Reputation: safe	unknown
https://clmbtech.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://standardsandpraiserepurpose.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://07c225f3.online	sets.json.0.dr	false		unknown
https://salemovefinancial.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadopago.com.br	sets.json.0.dr	false	URL Reputation: safe	unknown
https://commentcamarche.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://etfacademy.it	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mighty-app.appspot.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hj.rs	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hearty.me	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadolibre.com.gt	sets.json.0.dr	false	URL Reputation: safe	unknown
https://timesinternet.in	sets.json.0.dr	false	URL Reputation: safe	unknown
https://indiatodayne.in	sets.json.0.dr	false	URL Reputation: safe	unknown
https://idbs-staging.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://blackrock.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://idbs-eworkbook.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://motherandbaby.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadolibre.co.cr	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hjck.com	sets.json.0.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved		unknown	unknown	false
172.217.16.196	www.google.com	United States		15169	GOOGLEUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1541355
Start date and time:	2024-10-24 18:14:38 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 26s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://na2.docusign.net/member/Images/email/docInvite-white.png
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@17/16@8/3
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 192.229.221.95, 199.232.214.172, 142.250.186.131, 142.250.181.238, 108.177.15.84, 162.248.185.182, 34.104.35.123, 2.16.164.115, 2.16.164.83, 2.18.64.212, 2.18.64.204, 13.85.23.206, 52.165.164.15, 20.242.39.171, 93.184.221.240, 142.250.185.195
Excluded domains from analysis (whitelisted): client.wns.windows.com, na2.docusign.net.akadns.net, fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, slscr.update.microsoft.com, na2-ch.docusign.net.akadns.net, ctldl.windowsupdate.com, clientservices.googleapis.com, docucdn-a.akamaihd.net.edgesuite.net, fe3cr.delivery.mp.microsoft.com, a1737.b.akamai.net, fe3.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, login.live.com, glb.cws.prod.dcat.dsp.trafficmanager.net, update.googleapis.com, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://na2.docusign.net/member/Images/email/docInvite-white.png

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 15:15:48 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.982303262736257
Encrypted:	false
SSDEEP:	48:8kdtT1NWHpidAKZdA19ehwiZUklqehay+3:8OnoZy
MD5:	D8CABD94EB8A5B0C9C2682EB1F3DC4C6
SHA1:	B6543D337B05FA7B7D6EE45AD798809703466CC1
SHA-256:	C50A740E54B5044A8CE571FD955392542122CFAF632DD3653DBCF5C2995BA323
SHA-512:	503A1BA7FA2CF31A761FBA60B7B1A33E4114DC77D2E18F9D1B616DAAE28F2025EF62B5669C960F8EEAE69C802912AB4D20067A5C947D22A735A36073F88AFDD0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....L.../&..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........K..\|.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 15:15:48 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.999627547278149
Encrypted:	false
SSDEEP:	48:82dtT1NWHpidAKZdA1weh/iZUkAQkqehJy+2:88ni9QYy
MD5:	469BFAA499670937414D4E436D84E834
SHA1:	B62DF126F0A352D210260D22F027C738A05B7E63
SHA-256:	3D3C4479D7533764CA00E16FA32BD848E3B2FF443D0602B9EC26080CB4C74018
SHA-512:	11FC434AB25273BB778AE6D99551FC86191FCE33FFDADA19431E81B1E4C07321A76218089B4488CB15AAFBCDDE98E36E1D98F97C2FD9F7F233332ABF79D5DCD9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......./&..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........K..\|.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.0080543167518226
Encrypted:	false
SSDEEP:	48:8xedtT1NsHpidAKZdA14tseh7sFiZUkmgqeh7sfy+BX:8xUnYnFy
MD5:	344C67BF0DEEFC9323C06A8D66293826
SHA1:	FBDA2703DDB3F33096BDB7CC0D748FE05AC5F403
SHA-256:	77F30D4AFC34622FCFCF8DCB1D54344880BB6F01D5C3BB3C78F838B00CF474FC
SHA-512:	E4997A1DDE09A88BF9E36ADA1E23F570FFFFC046095196D4CD048CC5C1A57EE49D6915D43C2848CFC9A4DE61D4041C0A3B921B0108D63765D2795B7710B4CBE8
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........K..\|.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 15:15:48 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9993360037032604
Encrypted:	false
SSDEEP:	48:8gddtT1NWHpidAKZdA1vehDiZUkwqehty+R:8gdnpHy
MD5:	BC2C7B5725566D6D4115743E166F532B
SHA1:	029D0F3336259D5C3E10D1CF606BC396A5F0ACCC
SHA-256:	6FC5FC7E083884426A8076D2DE9711F9A93825E0A3B52DB287F9DBC2C9A4F815
SHA-512:	B973D954218C002EC3A66AB2760A7035DF253D6AADB0E795254CC55D9DC4EAE136B31743ACEE440ED9478D5DBF4C04410C58E4155D4DC10BC66D191FECBB928F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......./&..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........K..\|.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 15:15:48 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.987441499439818
Encrypted:	false
SSDEEP:	48:8jdtT1NWHpidAKZdA1hehBiZUk1W1qeh7y+C:8fnZ9by
MD5:	45CC3AC6B9314D9CC1EAEC1B7CCF39E3
SHA1:	8A39C1C5885CF9D92B85107BD447FD17CF79D930
SHA-256:	901BED3AD7CFADE1CB6653F5223533E30A99D4F8F9E47B8F84F910B9288632C8
SHA-512:	BAB60E4C6C322B3A60B4763156CC898A4A0CE3DA506A53FE789BDD816F62A01C8E27C660F81F31D47328F5B0E09BA1681CBA2B90DBB13CA5476E05752AF4756D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......./&..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........K..\|.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 15:15:48 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.996533482424489
Encrypted:	false
SSDEEP:	48:8BdtT1NWHpidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbFy+yT+:85nlT/TbxWOvTbFy7T
MD5:	D4A3B60E6136BFABA76F01455143B223
SHA1:	408BDE09C65216191D9D847760909DCC1BD75EBA
SHA-256:	0314FEB5D983F0977DF65843409561E94F6A4195461D134E87B170FD38774099
SHA-512:	EA55CB90B690C6E4033E2356B4618C495DB4F189409DB942991EB24A50056BC817C81258685689FB48CB97005070C946653CC5149127E77E484FBBC6490FAC02
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......../&..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........K..\|.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4324_1198034603\LICENSE

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	5.11458514637545
Encrypted:	false
SSDEEP:	48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH
MD5:	EE002CB9E51BB8DFA89640A406A1090A
SHA1:	49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2
SHA-256:	3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B
SHA-512:	D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C
Malicious:	false
Reputation:	low
Preview:	// Copyright 2015 The Chromium Authors. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the names of its.// contributors may be used to endorse or promote products derived from.// this software without specific prior written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT.// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR.// A PARTICULAR

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4324_1198034603\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	6.021127689065198
Encrypted:	false
SSDEEP:	48:p/hUI1atAdI567akUmYWEFw/3+ovGJ4F3jkZUbvzk98g5m7:RnYQI47avYUwvVGJ41jkZIzxgA7
MD5:	68E6B5733E04AB7BF19699A84D8ABBC2
SHA1:	1C11F06CA1AD3ED8116D356AB9164FD1D52B5CF0
SHA-256:	F095F969D6711F53F97747371C83D5D634EAEF21C54CB1A6A1CC5B816D633709
SHA-512:	9DC5D824A55C969820D5D1FBB0CA7773361F044AE0C255E7C48D994E16CE169FCEAC3DE180A3A544EBEF32337EA535683115584D592370E5FE7D85C68B86C891
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"dU2MmRUQSugaJAJvEN4uaQHx-KXdOkjj0yK8_aH4Afr3kN7DPOZRt6yLTS3UchBE5M-dgPPPBuKADj4KEK4B22SO6WQquL5J27AUPqQBGgr44-iFGVJdOLLlfirFlJmcYv6DUFRYiPsQFGMr1JFqInj19jgkOxzR6qqcNuTCB0wGEMeTU80r-igCjeQG6TIzPro7yKd_-UxsxO6OGAySmlIJIoU54X0p0ATNoZyAfkhb8kb0oN8unOU

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4324_1198034603\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9159446964030753
Encrypted:	false
SSDEEP:	3:Sq5TQRaELVHecsUDBAeHD5k:Sq5gJ+csHej5k
MD5:	CFB54589424206D0AE6437B5673F498D
SHA1:	D1EF6314F0F68EFDD0BA8F6CA9E59BFF863B1609
SHA-256:	285AC183C35350B4B77332172413902F83726CA8F53D63859B5DA082FD425A1C
SHA-512:	70FDCA4A1E6B7A5FFED3414E2DB74FECA7E0FD17482B8CB30393DFEE20AB9AD2B0B00FF0C590DD0E8D744D0EAD876CE8844519AF66618ED14666BCA56DF2DA21
Malicious:	false
Reputation:	low
Preview:	1.dbf288588465463a914bdfc5e86d465fb3592b2f1261dc0e40fcc5c1adc8e7e4

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4324_1198034603\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.4533115571544695
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFCmMARWHJqS1tean:F6VlM8aRWpqS1ln
MD5:	C3419069A1C30140B77045ABA38F12CF
SHA1:	11920F0C1E55CADC7D2893D1EEBB268B3459762A
SHA-256:	DB9A702209807BA039871E542E8356219F342A8D9C9CA34BCD9A86727F4A3A0F
SHA-512:	C5E95A4E9F5919CB14F4127539C4353A55C5F68062BF6F95E1843B6690CEBED3C93170BADB2412B7FB9F109A620385B0AE74783227D6813F26FF8C29074758A1
Malicious:	false
Reputation:	low
Preview:	{. "manifest_version": 2,. "name": "First Party Sets",. "version": "2024.8.10.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4324_1198034603\sets.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9748
Entropy (8bit):	4.629326694042306
Encrypted:	false
SSDEEP:	96:Mon4mvC4qX19s1blbw/BNKLcxbdmf56MFJtRTGXvcxN43uP+8qJq:v5C4ql7BkIVmtRTGXvcxBsq
MD5:	EEA4913A6625BEB838B3E4E79999B627
SHA1:	1B4966850F1B117041407413B70BFA925FD83703
SHA-256:	20EF4DE871ECE3C5F14867C4AE8465999C7A2CC1633525E752320E61F78A373C
SHA-512:	31B1429A5FACD6787F6BB45216A4AB1C724C79438C18EBFA8C19CED83149C17783FD492A03197110A75AAF38486A9F58828CA30B58D41E0FE89DFE8BDFC8A004
Malicious:	false
Reputation:	low
Preview:	{"primary":"https://bild.de","associatedSites":["https://welt.de","https://autobild.de","https://computerbild.de","https://wieistmeineip.de"],"serviceSites":["https://www.asadcdn.com"]}.{"primary":"https://blackrock.com","associatedSites":["https://blackrockadvisorelite.it","https://cachematrix.com","https://efront.com","https://etfacademy.it","https://ishares.com"]}.{"primary":"https://cafemedia.com","associatedSites":["https://cardsayings.net","https://nourishingpursuits.com"]}.{"primary":"https://caracoltv.com","associatedSites":["https://noticiascaracol.com","https://bluradio.com","https://shock.co","https://bumbox.com","https://hjck.com"]}.{"primary":"https://carcostadvisor.com","ccTLDs":{"https://carcostadvisor.com":["https://carcostadvisor.be","https://carcostadvisor.fr"]}}.{"primary":"https://citybibleforum.org","associatedSites":["https://thirdspace.org.au"]}.{"primary":"https://cognitiveai.ru","associatedSites":["https://cognitive-ai.ru"]}.{"primary":"https://drimer.io","asso

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2555
Entropy (8bit):	7.88910627682238
Encrypted:	false
SSDEEP:	48:7Xjm4Mm5fF6Gk9uLduvH0NuAiRxbE6f6VwgIaKruai8SjFTW8KJjtz:RfF6GkUwAiXbEW6NIaSuainFTqJh
MD5:	6A78B0944A1DA4F3892D0F4A0163DA25
SHA1:	EDBEE8BAECF4D272F1B52BFA4C823DDC50E5486D
SHA-256:	C9903CB4027BD617227A5F968C1B48883F9FFC3C140A629C418A413A3C14991C
SHA-512:	1ECB84B1B369B7CF3BFA9184B527B9AB5885B1A8BE20A4AA408619D769379DC96ED56616400149381F14204C193FF359C86D7A7113089C6510A109705BF0C089
Malicious:	false
Reputation:	low
URL:	https://na2.docusign.net/member/Images/email/docInvite-white.png
Preview:	.PNG........IHDR.............<.q.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..q.:..mO......Ax...K..s..U.u`_.N.]...p.y.N...$..j....1...."...B...#./.$u...,.......r.."...z..-Q...A$`y...&..@.&..%..f...&..Wy..UQ..Z._.Z.v.X.a.$L...":.]~......~..kW9H..\ [3.j....,..-.....g..N..........R..h...^&;zv..R..I%.....wLZ...9.%..C...e..D.9.......S...l~.J........MZ....B..)&..BG....b.@...X.^./.(n.@..L\|......c$Nf....Y..B.0..]..j.qB!9....2@.c.e.....-.8.....L.+..zUl.^.a.e4!.r.{...[CKK....k4.3Tp}~]#...9a.L./Li.Sp....S..].........7......(.@.P..W..T..".WE..C..1U.1.J.R@...l.J.......8...<0...aH%..;.ENb.eXOU./.%.uR.m:.J+...s7e.B..N..A...."..M...J..K....h.>..f.........xk....C.* .R.u6.....YL...*.6D.....Y`...P..m.Zg.K,..A....i...Z.......R..k..bx.Xp..`........}H..`...S[..7..V.{.&.Z!Y.1.i.t....X....Z...\...{..G.......\|...Z.X.).(..z....>..T....X+.3...B...Y.a.'.....X.._u.....0.P..I.P.......r....&.`.\;/.2..9TA..'.V.9.7...9T.G@.s..+...57xZ.T..]Z..R..CwH..RzG.`.p....1A.

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 8 bits/pixel, 32x32, 8 bits/pixel
Category:	downloaded
Size (bytes):	7405
Entropy (8bit):	2.037697524051661
Encrypted:	false
SSDEEP:	24:J/EFEXke6Ivyxpl3GCHKlJgY29Y8GEpx5Bh60G3Z2D7GStiv:miXhFvyxpxqQ1hpx5Bojm
MD5:	888E04D5D5FF290D47BF73787F1E0BFC
SHA1:	C8EDC4B60BB909C025B908F4ADBEEA557581687C
SHA-256:	387483B8C9FB9F677E0D72D066945675540FE417E6E6C70BAA9C013CB8FC88CD
SHA-512:	0662402C7EBC3D670D40EC55E5DC25C4360E54743517B783151F088A23FDCBE70803B4ED43BCE87D5B50908AC52AF4DEEDE6311445086E5CCFF98E2A82C0CB7A
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/olive/images/2.15.0/favicons/favicon.ico
Preview:	......00..........6... ......................h.......(...0...`............................................"...........ti......................................\|q......!..............# .......................y......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 8 bits/pixel, 32x32, 8 bits/pixel
Category:	dropped
Size (bytes):	7405
Entropy (8bit):	2.037697524051661
Encrypted:	false
SSDEEP:	24:J/EFEXke6Ivyxpl3GCHKlJgY29Y8GEpx5Bh60G3Z2D7GStiv:miXhFvyxpxqQ1hpx5Bojm
MD5:	888E04D5D5FF290D47BF73787F1E0BFC
SHA1:	C8EDC4B60BB909C025B908F4ADBEEA557581687C
SHA-256:	387483B8C9FB9F677E0D72D066945675540FE417E6E6C70BAA9C013CB8FC88CD
SHA-512:	0662402C7EBC3D670D40EC55E5DC25C4360E54743517B783151F088A23FDCBE70803B4ED43BCE87D5B50908AC52AF4DEEDE6311445086E5CCFF98E2A82C0CB7A
Malicious:	false
Reputation:	low
Preview:	......00..........6... ......................h.......(...0...`............................................"...........ti......................................\|q......!..............# .......................y......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 18:15:35.520570040 CEST	443	49711	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:35.520593882 CEST	443	49711	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:35.520612955 CEST	443	49711	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:35.520620108 CEST	443	49711	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:35.520628929 CEST	443	49711	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:35.520636082 CEST	443	49711	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:35.520652056 CEST	443	49711	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:35.520699024 CEST	443	49711	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:35.520714045 CEST	443	49711	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:35.520730972 CEST	443	49711	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:35.520745993 CEST	49711	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:35.520843029 CEST	49711	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:35.521550894 CEST	443	49711	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:35.521568060 CEST	443	49711	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:35.521584034 CEST	443	49711	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:35.521619081 CEST	49711	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:35.564169884 CEST	49711	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:35.635629892 CEST	443	49711	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:35.635683060 CEST	443	49711	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:35.635720968 CEST	443	49711	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:35.635807991 CEST	49711	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:35.636356115 CEST	49711	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:35.636400938 CEST	49711	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:35.641690969 CEST	443	49711	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:35.642164946 CEST	443	49711	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:35.642302990 CEST	49711	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:35.691030025 CEST	49712	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:35.691096067 CEST	443	49712	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:35.691247940 CEST	49712	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:35.691454887 CEST	49712	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:35.691463947 CEST	443	49712	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:36.267282009 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 24, 2024 18:15:36.267287016 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 24, 2024 18:15:36.407926083 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 24, 2024 18:15:36.810677052 CEST	443	49712	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:36.811027050 CEST	49712	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:36.826508045 CEST	49712	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:36.826556921 CEST	443	49712	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:36.826925993 CEST	443	49712	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:36.827348948 CEST	49712	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:36.827402115 CEST	49712	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:36.827464104 CEST	443	49712	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:37.840985060 CEST	443	49712	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:37.841007948 CEST	443	49712	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:37.841059923 CEST	443	49712	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:37.841100931 CEST	49712	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:37.841171026 CEST	443	49712	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:37.841269970 CEST	49712	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:37.841435909 CEST	49712	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:37.841485023 CEST	49712	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:37.841609955 CEST	443	49712	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:37.841641903 CEST	443	49712	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:37.841720104 CEST	49712	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:37.867731094 CEST	49713	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:37.867783070 CEST	443	49713	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:37.867847919 CEST	49713	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:37.867971897 CEST	49713	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:37.867989063 CEST	443	49713	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:38.999512911 CEST	443	49713	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:39.048600912 CEST	49713	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:39.165263891 CEST	49713	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:39.165287018 CEST	443	49713	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:39.171580076 CEST	49713	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:39.171586990 CEST	443	49713	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:39.171642065 CEST	49713	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:39.171648979 CEST	443	49713	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:39.748267889 CEST	443	49713	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:39.748297930 CEST	443	49713	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:39.748307943 CEST	443	49713	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:39.748338938 CEST	443	49713	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:39.748399973 CEST	49713	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:39.748426914 CEST	443	49713	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:39.748442888 CEST	49713	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:39.798506975 CEST	49713	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:39.873485088 CEST	443	49713	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:39.873557091 CEST	443	49713	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:39.873672962 CEST	49713	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:41.714101076 CEST	49713	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:41.714154005 CEST	443	49713	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:41.714169025 CEST	49713	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:41.714178085 CEST	443	49713	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:41.897176027 CEST	49715	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:41.897237062 CEST	443	49715	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:41.897344112 CEST	49715	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:41.897541046 CEST	49715	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:41.897561073 CEST	443	49715	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:41.905082941 CEST	49716	443	192.168.2.5	40.126.32.133
Oct 24, 2024 18:15:41.905119896 CEST	443	49716	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:41.905196905 CEST	49716	443	192.168.2.5	40.126.32.133
Oct 24, 2024 18:15:41.905488014 CEST	49716	443	192.168.2.5	40.126.32.133
Oct 24, 2024 18:15:41.905503035 CEST	443	49716	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:42.991966009 CEST	443	49715	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:43.029337883 CEST	443	49716	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:43.029517889 CEST	49716	443	192.168.2.5	40.126.32.133
Oct 24, 2024 18:15:43.111040115 CEST	49715	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:44.503453016 CEST	49715	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:44.503499985 CEST	443	49715	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:44.504977942 CEST	49715	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:44.504986048 CEST	443	49715	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:44.505029917 CEST	49715	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:44.505044937 CEST	443	49715	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:44.553128958 CEST	49716	443	192.168.2.5	40.126.32.133
Oct 24, 2024 18:15:44.553159952 CEST	443	49716	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:44.553625107 CEST	443	49716	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:44.554423094 CEST	49716	443	192.168.2.5	40.126.32.133
Oct 24, 2024 18:15:44.554683924 CEST	49716	443	192.168.2.5	40.126.32.133
Oct 24, 2024 18:15:44.554713011 CEST	443	49716	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:44.918083906 CEST	49718	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:44.918176889 CEST	443	49718	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:44.918270111 CEST	49718	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:44.918790102 CEST	49718	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:44.918818951 CEST	443	49718	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:44.971302986 CEST	443	49716	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:44.971332073 CEST	443	49716	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:44.971415997 CEST	49716	443	192.168.2.5	40.126.32.133
Oct 24, 2024 18:15:44.971438885 CEST	443	49716	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:45.010148048 CEST	49716	443	192.168.2.5	40.126.32.133
Oct 24, 2024 18:15:45.010170937 CEST	49716	443	192.168.2.5	40.126.32.133
Oct 24, 2024 18:15:45.010394096 CEST	443	49716	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:45.010426998 CEST	443	49716	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:45.010497093 CEST	49716	443	192.168.2.5	40.126.32.133
Oct 24, 2024 18:15:45.296324015 CEST	49719	443	192.168.2.5	40.126.32.133
Oct 24, 2024 18:15:45.296379089 CEST	443	49719	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:45.296463966 CEST	49719	443	192.168.2.5	40.126.32.133
Oct 24, 2024 18:15:45.299644947 CEST	49719	443	192.168.2.5	40.126.32.133
Oct 24, 2024 18:15:45.299686909 CEST	443	49719	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:45.440332890 CEST	443	49715	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:45.440360069 CEST	443	49715	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:45.440383911 CEST	443	49715	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:45.440440893 CEST	49715	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:45.440460920 CEST	443	49715	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:45.440507889 CEST	443	49715	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:45.440540075 CEST	49715	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:45.440548897 CEST	443	49715	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:45.440579891 CEST	49715	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:45.440579891 CEST	49715	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:45.440897942 CEST	443	49715	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:45.440972090 CEST	49715	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:45.447959900 CEST	49715	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:45.447983027 CEST	443	49715	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:45.447995901 CEST	49715	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:45.448004007 CEST	443	49715	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:45.908030033 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 24, 2024 18:15:45.954786062 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 24, 2024 18:15:46.036165953 CEST	443	49718	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:46.110996962 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 24, 2024 18:15:46.111037016 CEST	49718	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:46.191905975 CEST	49718	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:46.191926003 CEST	443	49718	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:46.199291945 CEST	49718	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:46.199310064 CEST	443	49718	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:46.199978113 CEST	49718	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:46.199995041 CEST	443	49718	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:46.557944059 CEST	443	49719	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:46.593806982 CEST	443	49718	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:46.593864918 CEST	443	49718	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:46.593884945 CEST	443	49718	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:46.593921900 CEST	443	49718	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:46.593946934 CEST	49718	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:46.593972921 CEST	49718	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:46.593972921 CEST	49718	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:46.593995094 CEST	443	49718	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:46.594019890 CEST	443	49718	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:46.594050884 CEST	49718	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:46.657852888 CEST	49719	443	192.168.2.5	40.126.32.133
Oct 24, 2024 18:15:46.703183889 CEST	49718	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:46.719835997 CEST	49719	443	192.168.2.5	40.126.32.133
Oct 24, 2024 18:15:46.719871044 CEST	443	49719	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:46.719913006 CEST	49718	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:46.719928980 CEST	443	49718	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:46.719960928 CEST	49718	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:46.720264912 CEST	443	49718	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:46.720343113 CEST	443	49718	40.126.32.74	192.168.2.5
Oct 24, 2024 18:15:46.720432043 CEST	49718	443	192.168.2.5	40.126.32.74
Oct 24, 2024 18:15:46.721745014 CEST	49719	443	192.168.2.5	40.126.32.133
Oct 24, 2024 18:15:46.721755981 CEST	443	49719	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:46.721812963 CEST	49719	443	192.168.2.5	40.126.32.133
Oct 24, 2024 18:15:46.721853971 CEST	443	49719	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:47.191382885 CEST	49723	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:47.191400051 CEST	443	49723	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:47.191464901 CEST	49723	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:47.192135096 CEST	49723	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:47.192156076 CEST	443	49723	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:47.211538076 CEST	49724	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:47.211565018 CEST	443	49724	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:47.211639881 CEST	49724	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:47.212543011 CEST	49724	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:47.212554932 CEST	443	49724	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:47.762188911 CEST	443	49707	23.1.237.91	192.168.2.5
Oct 24, 2024 18:15:47.762295008 CEST	49707	443	192.168.2.5	23.1.237.91
Oct 24, 2024 18:15:48.001737118 CEST	443	49719	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:48.001765966 CEST	443	49719	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:48.001774073 CEST	443	49719	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:48.001813889 CEST	443	49719	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:48.001856089 CEST	443	49719	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:48.001897097 CEST	49719	443	192.168.2.5	40.126.32.133
Oct 24, 2024 18:15:48.001898050 CEST	49719	443	192.168.2.5	40.126.32.133
Oct 24, 2024 18:15:48.001915932 CEST	443	49719	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:48.001939058 CEST	49719	443	192.168.2.5	40.126.32.133
Oct 24, 2024 18:15:48.002353907 CEST	49719	443	192.168.2.5	40.126.32.133
Oct 24, 2024 18:15:48.002353907 CEST	49719	443	192.168.2.5	40.126.32.133
Oct 24, 2024 18:15:48.002371073 CEST	443	49719	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:48.002516985 CEST	443	49719	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:48.002543926 CEST	443	49719	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:48.002607107 CEST	49719	443	192.168.2.5	40.126.32.133
Oct 24, 2024 18:15:48.026177883 CEST	49727	443	192.168.2.5	40.126.32.133
Oct 24, 2024 18:15:48.026220083 CEST	443	49727	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:48.026319027 CEST	49727	443	192.168.2.5	40.126.32.133
Oct 24, 2024 18:15:48.026499033 CEST	49727	443	192.168.2.5	40.126.32.133
Oct 24, 2024 18:15:48.026509047 CEST	443	49727	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:49.369760990 CEST	443	49723	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:49.369854927 CEST	49723	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:49.371512890 CEST	443	49724	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:49.371592045 CEST	49724	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:49.379446030 CEST	49724	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:49.379488945 CEST	443	49724	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:49.379853964 CEST	443	49724	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:49.398129940 CEST	49723	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:49.398147106 CEST	443	49723	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:49.398515940 CEST	443	49723	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:49.416744947 CEST	49723	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:49.416990042 CEST	49723	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:49.416999102 CEST	443	49723	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:49.417243004 CEST	49723	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:49.418344021 CEST	49724	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:49.418405056 CEST	49724	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:49.418410063 CEST	443	49724	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:49.418662071 CEST	49724	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:49.463335037 CEST	443	49724	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:49.463351011 CEST	443	49723	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:49.627288103 CEST	443	49727	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:49.630064964 CEST	49727	443	192.168.2.5	40.126.32.133
Oct 24, 2024 18:15:49.630103111 CEST	443	49727	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:49.635752916 CEST	49727	443	192.168.2.5	40.126.32.133
Oct 24, 2024 18:15:49.635767937 CEST	443	49727	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:49.635848999 CEST	49727	443	192.168.2.5	40.126.32.133
Oct 24, 2024 18:15:49.635865927 CEST	443	49727	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:49.665589094 CEST	443	49723	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:49.666291952 CEST	49723	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:49.666301012 CEST	443	49723	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:49.666416883 CEST	49723	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:49.667824984 CEST	443	49724	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:49.668272972 CEST	49724	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:49.668302059 CEST	443	49724	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:49.668340921 CEST	49724	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:49.668514013 CEST	443	49724	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:49.668540001 CEST	49724	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:49.668564081 CEST	49724	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:50.055282116 CEST	443	49727	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:50.055335999 CEST	443	49727	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:50.055360079 CEST	443	49727	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:50.055414915 CEST	49727	443	192.168.2.5	40.126.32.133
Oct 24, 2024 18:15:50.055466890 CEST	443	49727	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:50.055500984 CEST	49727	443	192.168.2.5	40.126.32.133
Oct 24, 2024 18:15:50.055821896 CEST	49727	443	192.168.2.5	40.126.32.133
Oct 24, 2024 18:15:50.055862904 CEST	443	49727	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:50.055887938 CEST	49727	443	192.168.2.5	40.126.32.133
Oct 24, 2024 18:15:50.056020975 CEST	443	49727	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:50.056058884 CEST	443	49727	40.126.32.133	192.168.2.5
Oct 24, 2024 18:15:50.056406975 CEST	49727	443	192.168.2.5	40.126.32.133
Oct 24, 2024 18:15:50.635087013 CEST	49733	443	192.168.2.5	172.217.16.196
Oct 24, 2024 18:15:50.635118008 CEST	443	49733	172.217.16.196	192.168.2.5
Oct 24, 2024 18:15:50.635493040 CEST	49733	443	192.168.2.5	172.217.16.196
Oct 24, 2024 18:15:50.635948896 CEST	49733	443	192.168.2.5	172.217.16.196
Oct 24, 2024 18:15:50.635962963 CEST	443	49733	172.217.16.196	192.168.2.5
Oct 24, 2024 18:15:51.508584023 CEST	443	49733	172.217.16.196	192.168.2.5
Oct 24, 2024 18:15:51.509354115 CEST	49733	443	192.168.2.5	172.217.16.196
Oct 24, 2024 18:15:51.509383917 CEST	443	49733	172.217.16.196	192.168.2.5
Oct 24, 2024 18:15:51.511023998 CEST	443	49733	172.217.16.196	192.168.2.5
Oct 24, 2024 18:15:51.511337996 CEST	49733	443	192.168.2.5	172.217.16.196
Oct 24, 2024 18:15:51.516738892 CEST	49733	443	192.168.2.5	172.217.16.196
Oct 24, 2024 18:15:51.516820908 CEST	443	49733	172.217.16.196	192.168.2.5
Oct 24, 2024 18:15:51.561964989 CEST	49733	443	192.168.2.5	172.217.16.196
Oct 24, 2024 18:15:51.561975002 CEST	443	49733	172.217.16.196	192.168.2.5
Oct 24, 2024 18:15:51.608923912 CEST	49733	443	192.168.2.5	172.217.16.196
Oct 24, 2024 18:15:51.699289083 CEST	49735	443	192.168.2.5	184.28.90.27
Oct 24, 2024 18:15:51.699326992 CEST	443	49735	184.28.90.27	192.168.2.5
Oct 24, 2024 18:15:51.699417114 CEST	49735	443	192.168.2.5	184.28.90.27
Oct 24, 2024 18:15:51.701174974 CEST	49735	443	192.168.2.5	184.28.90.27
Oct 24, 2024 18:15:51.701190948 CEST	443	49735	184.28.90.27	192.168.2.5
Oct 24, 2024 18:15:52.096838951 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:52.096899033 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:52.096983910 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:52.097372055 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:52.097404957 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:52.550368071 CEST	443	49735	184.28.90.27	192.168.2.5
Oct 24, 2024 18:15:52.550451994 CEST	49735	443	192.168.2.5	184.28.90.27
Oct 24, 2024 18:15:52.552759886 CEST	49735	443	192.168.2.5	184.28.90.27
Oct 24, 2024 18:15:52.552771091 CEST	443	49735	184.28.90.27	192.168.2.5
Oct 24, 2024 18:15:52.553092957 CEST	443	49735	184.28.90.27	192.168.2.5
Oct 24, 2024 18:15:52.592641115 CEST	49735	443	192.168.2.5	184.28.90.27
Oct 24, 2024 18:15:52.595043898 CEST	49735	443	192.168.2.5	184.28.90.27
Oct 24, 2024 18:15:52.635329962 CEST	443	49735	184.28.90.27	192.168.2.5
Oct 24, 2024 18:15:52.837213993 CEST	443	49735	184.28.90.27	192.168.2.5
Oct 24, 2024 18:15:52.837335110 CEST	443	49735	184.28.90.27	192.168.2.5
Oct 24, 2024 18:15:52.837402105 CEST	49735	443	192.168.2.5	184.28.90.27
Oct 24, 2024 18:15:52.837487936 CEST	49735	443	192.168.2.5	184.28.90.27
Oct 24, 2024 18:15:52.837503910 CEST	443	49735	184.28.90.27	192.168.2.5
Oct 24, 2024 18:15:52.837515116 CEST	49735	443	192.168.2.5	184.28.90.27
Oct 24, 2024 18:15:52.837519884 CEST	443	49735	184.28.90.27	192.168.2.5
Oct 24, 2024 18:15:52.875715971 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:52.875847101 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:52.877872944 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:52.877902031 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:52.878329039 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:52.889257908 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:52.890312910 CEST	49738	443	192.168.2.5	184.28.90.27
Oct 24, 2024 18:15:52.890350103 CEST	443	49738	184.28.90.27	192.168.2.5
Oct 24, 2024 18:15:52.890440941 CEST	49738	443	192.168.2.5	184.28.90.27
Oct 24, 2024 18:15:52.890844107 CEST	49738	443	192.168.2.5	184.28.90.27
Oct 24, 2024 18:15:52.890858889 CEST	443	49738	184.28.90.27	192.168.2.5
Oct 24, 2024 18:15:52.931328058 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:53.139586926 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:53.139609098 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:53.139624119 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:53.139698982 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:53.139764071 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:53.139803886 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:53.139837027 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:53.175388098 CEST	49739	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:53.175445080 CEST	443	49739	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:53.175626993 CEST	49739	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:53.176609039 CEST	49739	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:53.176625967 CEST	443	49739	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:53.181200981 CEST	49740	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:53.181252003 CEST	443	49740	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:53.181582928 CEST	49740	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:53.182379007 CEST	49740	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:53.182393074 CEST	443	49740	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:53.257378101 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:53.257451057 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:53.257493973 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:53.257524967 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:53.257572889 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:53.257596016 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:53.374552011 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:53.374572039 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:53.374686956 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:53.374716997 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:53.374777079 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:53.492461920 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:53.492512941 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:53.492574930 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:53.492600918 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:53.492645025 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:53.492669106 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:53.608843088 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:53.608867884 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:53.608999014 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:53.609028101 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:53.609076023 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:53.725672960 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:53.725693941 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:53.725914955 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:53.725981951 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:53.726052999 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:53.742999077 CEST	443	49738	184.28.90.27	192.168.2.5
Oct 24, 2024 18:15:53.743122101 CEST	49738	443	192.168.2.5	184.28.90.27
Oct 24, 2024 18:15:53.842938900 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:53.842959881 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:53.843086004 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:53.843116045 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:53.843173981 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:53.846163988 CEST	49738	443	192.168.2.5	184.28.90.27
Oct 24, 2024 18:15:53.846200943 CEST	443	49738	184.28.90.27	192.168.2.5
Oct 24, 2024 18:15:53.846527100 CEST	443	49738	184.28.90.27	192.168.2.5
Oct 24, 2024 18:15:53.870151997 CEST	49738	443	192.168.2.5	184.28.90.27
Oct 24, 2024 18:15:53.887020111 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:53.887043953 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:53.887104988 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:53.887125015 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:53.887183905 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:53.887207985 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:53.911334038 CEST	443	49738	184.28.90.27	192.168.2.5
Oct 24, 2024 18:15:54.003710985 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:54.003732920 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:54.003870010 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:54.003894091 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:54.003956079 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:54.128910065 CEST	443	49738	184.28.90.27	192.168.2.5
Oct 24, 2024 18:15:54.128989935 CEST	443	49738	184.28.90.27	192.168.2.5
Oct 24, 2024 18:15:54.129133940 CEST	49738	443	192.168.2.5	184.28.90.27
Oct 24, 2024 18:15:54.129439116 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:54.129461050 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:54.129549026 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:54.129575014 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:54.129636049 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:54.195449114 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:54.195473909 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:54.195590019 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:54.195620060 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:54.195683002 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:54.277455091 CEST	443	49740	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:54.277585030 CEST	49740	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:54.291327000 CEST	443	49739	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:54.291484118 CEST	49739	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:54.312190056 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:54.312215090 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:54.312297106 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:54.312320948 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:54.312377930 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:54.327613115 CEST	49739	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:54.327637911 CEST	443	49739	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:54.328003883 CEST	443	49739	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:54.332375050 CEST	49740	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:54.332391977 CEST	443	49740	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:54.332726955 CEST	443	49740	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:54.339698076 CEST	49738	443	192.168.2.5	184.28.90.27
Oct 24, 2024 18:15:54.339698076 CEST	49738	443	192.168.2.5	184.28.90.27
Oct 24, 2024 18:15:54.339746952 CEST	443	49738	184.28.90.27	192.168.2.5
Oct 24, 2024 18:15:54.339751959 CEST	443	49738	184.28.90.27	192.168.2.5
Oct 24, 2024 18:15:54.341654062 CEST	49739	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:54.341775894 CEST	49739	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:54.341790915 CEST	443	49739	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:54.341962099 CEST	49739	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:54.344516993 CEST	49740	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:54.344516993 CEST	49740	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:54.344535112 CEST	443	49740	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:54.344635963 CEST	49740	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:54.364516973 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:54.364537954 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:54.364634037 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:54.364671946 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:54.364720106 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:54.383349895 CEST	443	49739	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:54.391334057 CEST	443	49740	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:54.429546118 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:54.429615021 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:54.429645061 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:54.429711103 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:54.430056095 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:54.430099010 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:54.430140018 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:54.430159092 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:54.591464043 CEST	443	49740	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:54.592017889 CEST	443	49739	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:54.592544079 CEST	49740	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:54.592555046 CEST	443	49740	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:54.592730045 CEST	443	49740	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:54.592797995 CEST	49740	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:54.592819929 CEST	49740	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:54.592917919 CEST	49739	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:54.592933893 CEST	443	49739	40.113.103.199	192.168.2.5
Oct 24, 2024 18:15:54.592989922 CEST	49739	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:54.592989922 CEST	49739	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:15:54.713596106 CEST	49741	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:54.713674068 CEST	443	49741	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:54.713890076 CEST	49741	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:54.744820118 CEST	49742	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:54.744903088 CEST	443	49742	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:54.744990110 CEST	49742	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:54.749453068 CEST	49743	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:54.749505043 CEST	443	49743	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:54.749805927 CEST	49743	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:54.752882957 CEST	49744	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:54.752934933 CEST	443	49744	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:54.753154993 CEST	49744	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:54.756766081 CEST	49745	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:54.756800890 CEST	443	49745	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:54.756884098 CEST	49745	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:54.757015944 CEST	49744	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:54.757040977 CEST	443	49744	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:54.757344961 CEST	49743	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:54.757380009 CEST	443	49743	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:54.757441998 CEST	49741	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:54.757463932 CEST	443	49741	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:54.757507086 CEST	49745	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:54.757519960 CEST	443	49745	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:54.757744074 CEST	49742	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:54.757778883 CEST	443	49742	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.508358955 CEST	443	49744	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.510699034 CEST	49744	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.510709047 CEST	443	49744	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.512610912 CEST	49744	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.512614012 CEST	443	49744	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.517029047 CEST	443	49741	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.518274069 CEST	49741	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.518290043 CEST	443	49741	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.519890070 CEST	49741	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.519895077 CEST	443	49741	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.520684958 CEST	443	49743	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.521302938 CEST	49743	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.521311998 CEST	443	49743	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.522486925 CEST	49743	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.522492886 CEST	443	49743	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.523684025 CEST	443	49745	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.524180889 CEST	49745	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.524195910 CEST	443	49745	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.524452925 CEST	443	49742	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.525471926 CEST	49745	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.525479078 CEST	443	49745	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.526994944 CEST	49742	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.527029037 CEST	443	49742	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.528335094 CEST	49742	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.528347969 CEST	443	49742	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.643340111 CEST	443	49744	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.643471956 CEST	443	49744	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.643655062 CEST	49744	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.644012928 CEST	49744	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.644046068 CEST	443	49744	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.653172970 CEST	49746	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.653224945 CEST	443	49746	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.653405905 CEST	49746	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.654530048 CEST	49746	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.654556990 CEST	443	49746	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.658001900 CEST	443	49741	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.658092976 CEST	443	49741	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.658154964 CEST	49741	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.658880949 CEST	49741	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.658896923 CEST	443	49741	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.658945084 CEST	49741	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.658951998 CEST	443	49741	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.661065102 CEST	443	49743	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.661089897 CEST	443	49743	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.661173105 CEST	49743	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.661185026 CEST	443	49743	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.661437988 CEST	443	49743	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.661489010 CEST	49743	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.662703037 CEST	49743	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.662709951 CEST	443	49743	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.663419008 CEST	443	49745	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.663449049 CEST	443	49745	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.663537979 CEST	49745	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.663549900 CEST	443	49745	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.663592100 CEST	49745	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.663830996 CEST	443	49745	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.663872957 CEST	443	49742	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.663878918 CEST	443	49745	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.663896084 CEST	443	49742	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.663927078 CEST	49745	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.663949013 CEST	443	49742	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.663975000 CEST	49742	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.664007902 CEST	49742	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.665729046 CEST	49745	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.665740013 CEST	443	49745	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.665769100 CEST	49745	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.665774107 CEST	443	49745	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.666254044 CEST	49742	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.666281939 CEST	443	49742	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.666331053 CEST	49742	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.666347980 CEST	443	49742	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.678977966 CEST	49747	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.678996086 CEST	443	49747	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.679071903 CEST	49747	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.681869984 CEST	49748	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.681895971 CEST	443	49748	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.682015896 CEST	49748	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.682324886 CEST	49748	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.682342052 CEST	443	49748	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.682943106 CEST	49749	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.682975054 CEST	443	49749	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.683058023 CEST	49749	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.683212996 CEST	49749	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.683238983 CEST	443	49749	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.683517933 CEST	49747	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.683532953 CEST	443	49747	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.687608004 CEST	49750	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.687621117 CEST	443	49750	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:55.687715054 CEST	49750	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.688261986 CEST	49750	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:55.688275099 CEST	443	49750	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.415402889 CEST	443	49746	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.422154903 CEST	49746	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.422194958 CEST	443	49746	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.424082041 CEST	49746	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.424088001 CEST	443	49746	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.431287050 CEST	443	49748	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.437077045 CEST	49748	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.437134981 CEST	443	49748	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.438180923 CEST	49748	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.438198090 CEST	443	49748	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.446085930 CEST	443	49749	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.446885109 CEST	49749	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.446907043 CEST	443	49749	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.447834969 CEST	49749	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.447844982 CEST	443	49749	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.447921038 CEST	443	49747	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.456540108 CEST	443	49750	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.482371092 CEST	49747	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.482389927 CEST	443	49747	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.483639956 CEST	49747	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.483645916 CEST	443	49747	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.488878012 CEST	49750	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.488902092 CEST	443	49750	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.490091085 CEST	49750	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.490103006 CEST	443	49750	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.577179909 CEST	443	49746	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.577274084 CEST	443	49746	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.577579021 CEST	49746	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.577617884 CEST	443	49748	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.577675104 CEST	443	49748	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.577766895 CEST	49748	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.589967012 CEST	443	49749	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.590037107 CEST	443	49749	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.590404987 CEST	49749	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.622046947 CEST	443	49747	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.622128963 CEST	443	49747	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.622332096 CEST	49747	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.627499104 CEST	443	49750	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.627582073 CEST	443	49750	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.627675056 CEST	49750	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.741261005 CEST	49746	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.741281033 CEST	443	49746	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.742582083 CEST	49747	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.742597103 CEST	443	49747	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.742614985 CEST	49747	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.742624044 CEST	443	49747	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.744894981 CEST	49750	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.744951010 CEST	443	49750	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.750089884 CEST	49748	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.750097990 CEST	443	49748	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.753546953 CEST	49749	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.753576994 CEST	443	49749	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.753592968 CEST	49749	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.753602028 CEST	443	49749	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.775506020 CEST	49751	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.775544882 CEST	443	49751	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.775607109 CEST	49751	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.778914928 CEST	49752	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.778947115 CEST	443	49752	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.779066086 CEST	49752	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.779073000 CEST	49751	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.779093027 CEST	443	49751	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.783922911 CEST	49753	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.783955097 CEST	443	49753	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.784189939 CEST	49753	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.785881996 CEST	49753	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.785903931 CEST	443	49753	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.786067009 CEST	49752	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.786092043 CEST	443	49752	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.811702013 CEST	49754	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.811742067 CEST	443	49754	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.811975956 CEST	49754	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.827028990 CEST	49755	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.827049971 CEST	443	49755	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.827121019 CEST	49755	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.827353954 CEST	49754	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.827369928 CEST	443	49754	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.828222990 CEST	49755	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:56.828237057 CEST	443	49755	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:56.937201977 CEST	49756	443	192.168.2.5	20.109.210.53
Oct 24, 2024 18:15:56.937242985 CEST	443	49756	20.109.210.53	192.168.2.5
Oct 24, 2024 18:15:56.937370062 CEST	49756	443	192.168.2.5	20.109.210.53
Oct 24, 2024 18:15:56.938607931 CEST	49756	443	192.168.2.5	20.109.210.53
Oct 24, 2024 18:15:56.938623905 CEST	443	49756	20.109.210.53	192.168.2.5
Oct 24, 2024 18:15:57.536899090 CEST	443	49751	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.539330959 CEST	49751	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.539350986 CEST	443	49751	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.540314913 CEST	49751	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.540327072 CEST	443	49751	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.540410042 CEST	443	49752	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.541132927 CEST	49752	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.541141033 CEST	443	49752	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.541785955 CEST	49752	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.541809082 CEST	443	49752	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.543775082 CEST	443	49753	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.545190096 CEST	49753	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.545201063 CEST	443	49753	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.546333075 CEST	49753	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.546339989 CEST	443	49753	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.598078966 CEST	443	49754	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.598349094 CEST	443	49755	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.599469900 CEST	49754	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.599488020 CEST	443	49754	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.601030111 CEST	49754	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.601036072 CEST	443	49754	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.601804018 CEST	49755	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.601821899 CEST	443	49755	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.602870941 CEST	49755	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.602876902 CEST	443	49755	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.674813032 CEST	443	49751	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.675299883 CEST	443	49751	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.675367117 CEST	49751	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.675554037 CEST	49751	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.675576925 CEST	443	49751	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.675626993 CEST	49751	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.675635099 CEST	443	49751	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.679757118 CEST	443	49752	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.679914951 CEST	443	49752	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.679992914 CEST	49752	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.681643963 CEST	49758	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.681718111 CEST	443	49758	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.681792021 CEST	49758	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.682109118 CEST	49752	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.682132959 CEST	443	49752	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.682147980 CEST	49752	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.682159901 CEST	443	49752	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.682166100 CEST	443	49753	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.682235956 CEST	443	49753	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.682280064 CEST	49753	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.686420918 CEST	49759	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.686454058 CEST	443	49759	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.686599970 CEST	49759	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.686680079 CEST	49758	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.686696053 CEST	443	49758	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.686891079 CEST	49753	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.686902046 CEST	443	49753	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.686913967 CEST	49753	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.686919928 CEST	443	49753	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.688551903 CEST	49759	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.688566923 CEST	443	49759	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.691989899 CEST	49760	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.692018986 CEST	443	49760	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.692082882 CEST	49760	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.692240000 CEST	49760	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.692250967 CEST	443	49760	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.737636089 CEST	443	49755	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.737705946 CEST	443	49755	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.737752914 CEST	49755	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.738158941 CEST	49755	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.738167048 CEST	443	49755	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.738178015 CEST	49755	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.738183022 CEST	443	49755	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.739336967 CEST	443	49754	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.739475965 CEST	443	49754	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.739530087 CEST	49754	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.740206957 CEST	49754	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.740206957 CEST	49754	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.740221024 CEST	443	49754	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.740236044 CEST	443	49754	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.743912935 CEST	49761	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.743942976 CEST	443	49761	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.744002104 CEST	49761	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.745006084 CEST	49761	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.745021105 CEST	443	49761	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.746512890 CEST	49762	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.746526957 CEST	443	49762	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.746609926 CEST	49762	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.746846914 CEST	49762	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:57.746856928 CEST	443	49762	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:57.762991905 CEST	443	49756	20.109.210.53	192.168.2.5
Oct 24, 2024 18:15:57.763180017 CEST	49756	443	192.168.2.5	20.109.210.53
Oct 24, 2024 18:15:57.766921997 CEST	49756	443	192.168.2.5	20.109.210.53
Oct 24, 2024 18:15:57.766931057 CEST	443	49756	20.109.210.53	192.168.2.5
Oct 24, 2024 18:15:57.767354012 CEST	443	49756	20.109.210.53	192.168.2.5
Oct 24, 2024 18:15:57.809431076 CEST	49756	443	192.168.2.5	20.109.210.53
Oct 24, 2024 18:15:58.018450022 CEST	49756	443	192.168.2.5	20.109.210.53
Oct 24, 2024 18:15:58.063329935 CEST	443	49756	20.109.210.53	192.168.2.5
Oct 24, 2024 18:15:58.074420929 CEST	49707	443	192.168.2.5	23.1.237.91
Oct 24, 2024 18:15:58.074579000 CEST	49707	443	192.168.2.5	23.1.237.91
Oct 24, 2024 18:15:58.077157021 CEST	49763	443	192.168.2.5	23.1.237.91
Oct 24, 2024 18:15:58.077250004 CEST	443	49763	23.1.237.91	192.168.2.5
Oct 24, 2024 18:15:58.077405930 CEST	49763	443	192.168.2.5	23.1.237.91
Oct 24, 2024 18:15:58.077721119 CEST	49763	443	192.168.2.5	23.1.237.91
Oct 24, 2024 18:15:58.077756882 CEST	443	49763	23.1.237.91	192.168.2.5
Oct 24, 2024 18:15:58.080039024 CEST	443	49707	23.1.237.91	192.168.2.5
Oct 24, 2024 18:15:58.081020117 CEST	443	49707	23.1.237.91	192.168.2.5
Oct 24, 2024 18:15:58.286250114 CEST	443	49756	20.109.210.53	192.168.2.5
Oct 24, 2024 18:15:58.286312103 CEST	443	49756	20.109.210.53	192.168.2.5
Oct 24, 2024 18:15:58.286331892 CEST	443	49756	20.109.210.53	192.168.2.5
Oct 24, 2024 18:15:58.286370993 CEST	443	49756	20.109.210.53	192.168.2.5
Oct 24, 2024 18:15:58.286393881 CEST	49756	443	192.168.2.5	20.109.210.53
Oct 24, 2024 18:15:58.286408901 CEST	443	49756	20.109.210.53	192.168.2.5
Oct 24, 2024 18:15:58.286422014 CEST	443	49756	20.109.210.53	192.168.2.5
Oct 24, 2024 18:15:58.286571980 CEST	49756	443	192.168.2.5	20.109.210.53
Oct 24, 2024 18:15:58.286571980 CEST	49756	443	192.168.2.5	20.109.210.53
Oct 24, 2024 18:15:58.286849976 CEST	443	49756	20.109.210.53	192.168.2.5
Oct 24, 2024 18:15:58.287046909 CEST	49756	443	192.168.2.5	20.109.210.53
Oct 24, 2024 18:15:58.287046909 CEST	49756	443	192.168.2.5	20.109.210.53
Oct 24, 2024 18:15:58.287060976 CEST	443	49756	20.109.210.53	192.168.2.5
Oct 24, 2024 18:15:58.287703037 CEST	443	49756	20.109.210.53	192.168.2.5
Oct 24, 2024 18:15:58.287803888 CEST	49756	443	192.168.2.5	20.109.210.53
Oct 24, 2024 18:15:58.311726093 CEST	49756	443	192.168.2.5	20.109.210.53
Oct 24, 2024 18:15:58.311743975 CEST	443	49756	20.109.210.53	192.168.2.5
Oct 24, 2024 18:15:58.426487923 CEST	443	49759	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.427062988 CEST	49759	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.427073956 CEST	443	49759	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.427510023 CEST	49759	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.427525043 CEST	443	49759	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.440825939 CEST	443	49758	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.441246986 CEST	49758	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.441265106 CEST	443	49758	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.441776991 CEST	49758	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.441782951 CEST	443	49758	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.453677893 CEST	443	49760	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.454087973 CEST	49760	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.454171896 CEST	443	49760	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.454521894 CEST	49760	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.454536915 CEST	443	49760	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.488704920 CEST	443	49762	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.489238024 CEST	49762	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.489321947 CEST	443	49762	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.489583015 CEST	49762	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.489599943 CEST	443	49762	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.522144079 CEST	443	49761	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.522682905 CEST	49761	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.522691965 CEST	443	49761	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.523191929 CEST	49761	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.523196936 CEST	443	49761	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.560856104 CEST	443	49759	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.561219931 CEST	443	49759	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.561347961 CEST	49759	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.561789989 CEST	49759	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.561817884 CEST	443	49759	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.561844110 CEST	49759	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.561852932 CEST	443	49759	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.564677000 CEST	49764	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.564718008 CEST	443	49764	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.564878941 CEST	49764	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.565048933 CEST	49764	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.565056086 CEST	443	49764	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.578928947 CEST	443	49758	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.579019070 CEST	443	49758	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.579118013 CEST	49758	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.579360962 CEST	49758	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.579395056 CEST	443	49758	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.582473040 CEST	49765	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.582487106 CEST	443	49765	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.582552910 CEST	49765	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.582758904 CEST	49765	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.582771063 CEST	443	49765	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.591089010 CEST	443	49760	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.591217041 CEST	443	49760	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.591286898 CEST	49760	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.591389894 CEST	49760	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.591435909 CEST	443	49760	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.591465950 CEST	49760	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.591481924 CEST	443	49760	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.594894886 CEST	49766	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.594919920 CEST	443	49766	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.594994068 CEST	49766	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.595160961 CEST	49766	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.595172882 CEST	443	49766	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.623744965 CEST	443	49762	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.624541998 CEST	443	49762	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.624720097 CEST	49762	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.625360966 CEST	49762	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.625382900 CEST	443	49762	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.625407934 CEST	49762	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.625418901 CEST	443	49762	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.629517078 CEST	49767	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.629529953 CEST	443	49767	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.629901886 CEST	49767	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.630101919 CEST	49767	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.630112886 CEST	443	49767	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.661650896 CEST	443	49761	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.661786079 CEST	443	49761	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.661854029 CEST	49761	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.661999941 CEST	49761	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.662017107 CEST	443	49761	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.662031889 CEST	49761	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.662038088 CEST	443	49761	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.665283918 CEST	49768	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.665329933 CEST	443	49768	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.665396929 CEST	49768	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.665548086 CEST	49768	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:58.665569067 CEST	443	49768	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:58.765733957 CEST	443	49763	23.1.237.91	192.168.2.5
Oct 24, 2024 18:15:58.765845060 CEST	49763	443	192.168.2.5	23.1.237.91
Oct 24, 2024 18:15:59.305172920 CEST	443	49764	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.305789948 CEST	49764	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.305814981 CEST	443	49764	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.306387901 CEST	49764	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.306400061 CEST	443	49764	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.332524061 CEST	443	49765	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.333376884 CEST	49765	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.333405972 CEST	443	49765	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.333885908 CEST	49765	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.333892107 CEST	443	49765	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.359224081 CEST	443	49766	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.359747887 CEST	49766	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.359771013 CEST	443	49766	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.360318899 CEST	49766	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.360330105 CEST	443	49766	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.401098013 CEST	443	49767	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.401732922 CEST	49767	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.401746035 CEST	443	49767	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.402574062 CEST	49767	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.402578115 CEST	443	49767	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.406246901 CEST	443	49768	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.406606913 CEST	49768	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.406624079 CEST	443	49768	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.407299995 CEST	49768	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.407305956 CEST	443	49768	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.438704014 CEST	443	49764	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.439174891 CEST	443	49764	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.439240932 CEST	49764	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.439291954 CEST	49764	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.439291954 CEST	49764	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.439337015 CEST	443	49764	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.439366102 CEST	443	49764	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.442245007 CEST	49769	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.442281961 CEST	443	49769	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.442399979 CEST	49769	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.442526102 CEST	49769	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.442534924 CEST	443	49769	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.476893902 CEST	443	49765	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.476974010 CEST	443	49765	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.477031946 CEST	49765	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.477207899 CEST	49765	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.477216959 CEST	443	49765	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.477227926 CEST	49765	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.477231979 CEST	443	49765	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.480381966 CEST	49770	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.480416059 CEST	443	49770	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.480545998 CEST	49770	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.480595112 CEST	49770	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.480598927 CEST	443	49770	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.498236895 CEST	443	49766	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.498374939 CEST	443	49766	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.498447895 CEST	49766	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.498496056 CEST	49766	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.498496056 CEST	49766	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.498517036 CEST	443	49766	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.498542070 CEST	443	49766	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.500587940 CEST	49771	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.500603914 CEST	443	49771	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.500859022 CEST	49771	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.501010895 CEST	49771	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.501023054 CEST	443	49771	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.543107986 CEST	443	49767	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.543168068 CEST	443	49767	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.543227911 CEST	49767	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.543267012 CEST	443	49768	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.543360949 CEST	443	49768	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.543442011 CEST	49768	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.543602943 CEST	49767	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.543607950 CEST	443	49767	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.543632030 CEST	49767	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.543636084 CEST	443	49767	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.544960976 CEST	49768	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.544960976 CEST	49768	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.544977903 CEST	443	49768	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.544989109 CEST	443	49768	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.548245907 CEST	49772	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.548288107 CEST	443	49772	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.548374891 CEST	49772	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.548796892 CEST	49772	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.548810959 CEST	443	49772	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.549478054 CEST	49773	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.549505949 CEST	443	49773	13.107.253.45	192.168.2.5
Oct 24, 2024 18:15:59.549671888 CEST	49773	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.549673080 CEST	49773	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:15:59.549704075 CEST	443	49773	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.188877106 CEST	443	49769	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.189802885 CEST	49769	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.189829111 CEST	443	49769	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.190290928 CEST	49769	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.190299034 CEST	443	49769	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.232958078 CEST	443	49770	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.233527899 CEST	49770	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.233547926 CEST	443	49770	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.234071970 CEST	49770	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.234076977 CEST	443	49770	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.269170046 CEST	443	49771	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.269772053 CEST	49771	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.269792080 CEST	443	49771	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.270257950 CEST	49771	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.270263910 CEST	443	49771	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.302241087 CEST	443	49773	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.302874088 CEST	49773	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.302887917 CEST	443	49773	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.303473949 CEST	49773	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.303478956 CEST	443	49773	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.303725958 CEST	443	49772	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.304064035 CEST	49772	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.304081917 CEST	443	49772	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.304511070 CEST	49772	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.304514885 CEST	443	49772	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.324469090 CEST	443	49769	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.324558973 CEST	443	49769	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.324616909 CEST	49769	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.324862003 CEST	49769	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.324877977 CEST	443	49769	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.324891090 CEST	49769	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.324897051 CEST	443	49769	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.328278065 CEST	49774	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.328325033 CEST	443	49774	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.328598976 CEST	49774	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.328783035 CEST	49774	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.328798056 CEST	443	49774	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.370367050 CEST	443	49770	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.370443106 CEST	443	49770	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.370518923 CEST	49770	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.370698929 CEST	49770	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.370698929 CEST	49770	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.370707035 CEST	443	49770	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.370719910 CEST	443	49770	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.373594999 CEST	49775	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.373609066 CEST	443	49775	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.373744011 CEST	49775	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.373850107 CEST	49775	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.373861074 CEST	443	49775	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.410490036 CEST	443	49771	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.410583019 CEST	443	49771	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.410640001 CEST	49771	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.410794973 CEST	49771	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.410806894 CEST	443	49771	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.410818100 CEST	49771	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.410824060 CEST	443	49771	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.413652897 CEST	49776	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.413677931 CEST	443	49776	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.413741112 CEST	49776	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.413872957 CEST	49776	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.413886070 CEST	443	49776	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.440506935 CEST	443	49773	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.440829992 CEST	443	49773	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.440885067 CEST	49773	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.440927982 CEST	49773	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.440927982 CEST	49773	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.440937042 CEST	443	49773	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.440953016 CEST	443	49773	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.441241980 CEST	443	49772	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.441518068 CEST	443	49772	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.441572905 CEST	49772	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.441674948 CEST	49772	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.441684961 CEST	443	49772	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.441695929 CEST	49772	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.441700935 CEST	443	49772	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.443711996 CEST	49777	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.443743944 CEST	443	49777	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.443887949 CEST	49777	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.443950891 CEST	49777	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.443958044 CEST	443	49777	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.443973064 CEST	49778	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.443989038 CEST	443	49778	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:00.444048882 CEST	49778	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.444147110 CEST	49778	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:00.444159031 CEST	443	49778	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.078763008 CEST	443	49774	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.079351902 CEST	49774	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.079372883 CEST	443	49774	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.079857111 CEST	49774	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.079863071 CEST	443	49774	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.142070055 CEST	443	49775	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.142777920 CEST	49775	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.142793894 CEST	443	49775	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.143212080 CEST	49775	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.143217087 CEST	443	49775	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.186211109 CEST	443	49778	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.186484098 CEST	443	49776	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.186769962 CEST	49778	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.186795950 CEST	443	49778	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.187016964 CEST	49776	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.187031984 CEST	443	49776	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.187436104 CEST	49778	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.187441111 CEST	443	49778	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.187517881 CEST	49776	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.187524080 CEST	443	49776	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.214497089 CEST	443	49777	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.215018988 CEST	49777	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.215039968 CEST	443	49777	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.215241909 CEST	443	49774	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.215538025 CEST	443	49774	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.215572119 CEST	49777	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.215576887 CEST	443	49777	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.215601921 CEST	49774	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.215626955 CEST	49774	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.215641022 CEST	443	49774	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.215651035 CEST	49774	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.215656996 CEST	443	49774	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.218779087 CEST	49779	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.218811035 CEST	443	49779	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.218890905 CEST	49779	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.219058037 CEST	49779	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.219063997 CEST	443	49779	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.281717062 CEST	443	49775	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.282192945 CEST	443	49775	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.282310963 CEST	49775	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.282337904 CEST	49775	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.282345057 CEST	443	49775	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.282354116 CEST	49775	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.282358885 CEST	443	49775	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.286900997 CEST	49780	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.286919117 CEST	443	49780	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.287585974 CEST	49780	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.288048983 CEST	49780	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.288062096 CEST	443	49780	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.319684982 CEST	443	49778	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.320009947 CEST	443	49778	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.320066929 CEST	49778	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.320108891 CEST	49778	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.320121050 CEST	443	49778	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.320148945 CEST	49778	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.320156097 CEST	443	49778	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.323024988 CEST	49781	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.323060989 CEST	443	49781	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.323334932 CEST	49781	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.323501110 CEST	49781	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.323514938 CEST	443	49781	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.326390028 CEST	443	49776	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.326452971 CEST	443	49776	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.326513052 CEST	49776	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.326657057 CEST	49776	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.326662064 CEST	443	49776	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.326684952 CEST	49776	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.326689959 CEST	443	49776	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.329174995 CEST	49782	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.329186916 CEST	443	49782	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.329324007 CEST	49782	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.329461098 CEST	49782	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.329472065 CEST	443	49782	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.358957052 CEST	443	49777	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.360143900 CEST	443	49777	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.360282898 CEST	49777	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.360282898 CEST	49777	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.360306978 CEST	49777	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.360323906 CEST	443	49777	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.363383055 CEST	49783	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.363420010 CEST	443	49783	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.363523006 CEST	49783	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.363738060 CEST	49783	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.363754034 CEST	443	49783	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.501663923 CEST	443	49733	172.217.16.196	192.168.2.5
Oct 24, 2024 18:16:01.501739025 CEST	443	49733	172.217.16.196	192.168.2.5
Oct 24, 2024 18:16:01.501802921 CEST	49733	443	192.168.2.5	172.217.16.196
Oct 24, 2024 18:16:01.966059923 CEST	443	49779	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.966937065 CEST	49779	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.966958046 CEST	443	49779	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:01.967880964 CEST	49779	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:01.967890024 CEST	443	49779	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.028251886 CEST	443	49780	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.028866053 CEST	49780	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.028876066 CEST	443	49780	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.029373884 CEST	49780	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.029378891 CEST	443	49780	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.074263096 CEST	443	49781	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.074835062 CEST	49781	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.074847937 CEST	443	49781	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.075345039 CEST	49781	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.075351000 CEST	443	49781	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.080838919 CEST	443	49782	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.081248045 CEST	49782	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.081255913 CEST	443	49782	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.081696033 CEST	49782	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.081707001 CEST	443	49782	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.101619959 CEST	443	49779	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.101666927 CEST	443	49779	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.101825953 CEST	49779	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.101962090 CEST	49779	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.101979971 CEST	443	49779	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.101996899 CEST	49779	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.102003098 CEST	443	49779	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.105139017 CEST	49784	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.105156898 CEST	443	49784	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.105221033 CEST	49784	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.105365038 CEST	49784	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.105375051 CEST	443	49784	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.132323027 CEST	443	49783	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.132891893 CEST	49783	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.132905006 CEST	443	49783	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.133708000 CEST	49783	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.133714914 CEST	443	49783	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.163000107 CEST	443	49780	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.163225889 CEST	443	49780	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.163347960 CEST	49780	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.163371086 CEST	49780	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.163383007 CEST	443	49780	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.163392067 CEST	49780	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.163397074 CEST	443	49780	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.166431904 CEST	49785	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.166475058 CEST	443	49785	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.166549921 CEST	49785	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.166755915 CEST	49785	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.166774988 CEST	443	49785	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.211441994 CEST	443	49781	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.211698055 CEST	443	49781	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.211771965 CEST	49781	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.211802959 CEST	49781	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.211823940 CEST	443	49781	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.211836100 CEST	49781	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.211853981 CEST	443	49781	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.215001106 CEST	49786	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.215015888 CEST	443	49786	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.215089083 CEST	49786	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.215224981 CEST	49786	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.215230942 CEST	443	49786	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.218358040 CEST	443	49782	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.218410015 CEST	443	49782	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.218700886 CEST	49782	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.218806028 CEST	49782	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.218806028 CEST	49782	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.218816996 CEST	443	49782	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.218825102 CEST	443	49782	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.222425938 CEST	49787	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.222440958 CEST	443	49787	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.222505093 CEST	49787	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.222655058 CEST	49787	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.222666025 CEST	443	49787	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.269761086 CEST	443	49783	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.269915104 CEST	443	49783	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.270018101 CEST	49783	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.270433903 CEST	49783	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.270448923 CEST	443	49783	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.270464897 CEST	49783	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.270469904 CEST	443	49783	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.273802996 CEST	49788	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.273830891 CEST	443	49788	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.273897886 CEST	49788	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.274043083 CEST	49788	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.274051905 CEST	443	49788	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.874897003 CEST	443	49784	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.875866890 CEST	49784	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.875890017 CEST	443	49784	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.876383066 CEST	49784	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.876388073 CEST	443	49784	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.917824030 CEST	443	49785	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.918474913 CEST	49785	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.918503046 CEST	443	49785	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.918992996 CEST	49785	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.919008017 CEST	443	49785	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.971491098 CEST	443	49786	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.972086906 CEST	49786	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.972099066 CEST	443	49786	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.972258091 CEST	443	49787	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.972604990 CEST	49786	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.972609997 CEST	443	49786	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.972721100 CEST	49787	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.972740889 CEST	443	49787	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:02.973181009 CEST	49787	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:02.973192930 CEST	443	49787	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.016464949 CEST	443	49784	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.016709089 CEST	443	49784	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.016776085 CEST	49784	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.017069101 CEST	49784	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.017080069 CEST	443	49784	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.020245075 CEST	49789	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.020293951 CEST	443	49789	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.020365000 CEST	49789	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.020539045 CEST	49789	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.020556927 CEST	443	49789	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.037930012 CEST	443	49788	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.038398981 CEST	49788	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.038480043 CEST	443	49788	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.039020061 CEST	49788	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.039035082 CEST	443	49788	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.055545092 CEST	443	49785	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.055604935 CEST	443	49785	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.055757999 CEST	49785	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.055882931 CEST	49785	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.055902958 CEST	443	49785	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.055926085 CEST	49785	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.055939913 CEST	443	49785	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.058898926 CEST	49790	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.058917999 CEST	443	49790	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.059225082 CEST	49790	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.059413910 CEST	49790	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.059426069 CEST	443	49790	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.129790068 CEST	443	49786	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.129841089 CEST	443	49786	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.129889011 CEST	443	49787	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.129940987 CEST	443	49787	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.129951000 CEST	49786	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.129995108 CEST	49787	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.130141973 CEST	49787	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.130162001 CEST	443	49787	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.130184889 CEST	49787	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.130197048 CEST	443	49787	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.130306959 CEST	49786	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.130317926 CEST	443	49786	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.130327940 CEST	49786	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.130331993 CEST	443	49786	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.133270979 CEST	49791	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.133301020 CEST	443	49791	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.133333921 CEST	49792	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.133352995 CEST	443	49792	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.133389950 CEST	49791	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.133425951 CEST	49792	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.133573055 CEST	49791	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.133574009 CEST	49792	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.133586884 CEST	443	49791	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.133588076 CEST	443	49792	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.177938938 CEST	443	49788	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.178003073 CEST	443	49788	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.178231955 CEST	49788	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.178267956 CEST	49788	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.178276062 CEST	443	49788	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.178289890 CEST	49788	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.178293943 CEST	443	49788	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.181142092 CEST	49793	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.181231022 CEST	443	49793	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.181365967 CEST	49793	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.181534052 CEST	49793	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.181576014 CEST	443	49793	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.391604900 CEST	49733	443	192.168.2.5	172.217.16.196
Oct 24, 2024 18:16:03.391624928 CEST	443	49733	172.217.16.196	192.168.2.5
Oct 24, 2024 18:16:03.770118952 CEST	443	49789	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.771152973 CEST	49789	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.771181107 CEST	443	49789	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.771672964 CEST	49789	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.771681070 CEST	443	49789	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.812160969 CEST	443	49790	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.812716007 CEST	49790	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.812736034 CEST	443	49790	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.813268900 CEST	49790	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.813273907 CEST	443	49790	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.897408962 CEST	443	49791	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.898015022 CEST	49791	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.898036003 CEST	443	49791	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.898528099 CEST	49791	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.898535967 CEST	443	49791	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.906775951 CEST	443	49792	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.907284975 CEST	49792	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.907298088 CEST	443	49792	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.907737970 CEST	49792	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.907742977 CEST	443	49792	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.910888910 CEST	443	49789	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.910959005 CEST	443	49789	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.911066055 CEST	49789	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.911169052 CEST	49789	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.911189079 CEST	443	49789	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.911205053 CEST	49789	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.911212921 CEST	443	49789	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.914203882 CEST	49794	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.914222002 CEST	443	49794	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.914297104 CEST	49794	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.914449930 CEST	49794	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.914460897 CEST	443	49794	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.929382086 CEST	443	49793	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.929769993 CEST	49793	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.929790974 CEST	443	49793	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.930212975 CEST	49793	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.930221081 CEST	443	49793	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.949404001 CEST	443	49790	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.949467897 CEST	443	49790	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.949713945 CEST	49790	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.949743986 CEST	49790	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.949753046 CEST	443	49790	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.949764013 CEST	49790	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.949768066 CEST	443	49790	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.952907085 CEST	49795	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.952956915 CEST	443	49795	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:03.953057051 CEST	49795	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.953217983 CEST	49795	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:03.953244925 CEST	443	49795	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:04.041157961 CEST	443	49791	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:04.041573048 CEST	443	49791	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:04.041639090 CEST	49791	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:04.041672945 CEST	49791	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:04.041687965 CEST	443	49791	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:04.041716099 CEST	49791	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:04.041723013 CEST	443	49791	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:04.044831038 CEST	49796	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:04.044850111 CEST	443	49796	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:04.044915915 CEST	49796	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:04.045097113 CEST	49796	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:04.045105934 CEST	443	49796	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:04.047211885 CEST	443	49792	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:04.047270060 CEST	443	49792	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:04.047430992 CEST	49792	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:04.047456026 CEST	49792	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:04.047466993 CEST	443	49792	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:04.047493935 CEST	49792	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:04.047499895 CEST	443	49792	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:04.049690008 CEST	49797	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:04.049720049 CEST	443	49797	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:04.049839973 CEST	49797	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:04.049976110 CEST	49797	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:04.049993038 CEST	443	49797	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:04.065974951 CEST	443	49793	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:04.067677021 CEST	443	49793	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:04.067751884 CEST	49793	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:04.067795038 CEST	49793	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:04.067816973 CEST	443	49793	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:04.067852974 CEST	49793	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:04.067867041 CEST	443	49793	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:04.070295095 CEST	49798	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:04.070305109 CEST	443	49798	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:04.070374966 CEST	49798	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:04.070498943 CEST	49798	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:04.070508957 CEST	443	49798	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.034518003 CEST	49799	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:05.034573078 CEST	443	49799	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:05.034642935 CEST	49799	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:05.035289049 CEST	49799	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:05.035305977 CEST	443	49799	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:05.039431095 CEST	49800	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:05.039473057 CEST	443	49800	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:05.039545059 CEST	49800	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:05.040076971 CEST	49800	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:05.040086031 CEST	443	49800	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:05.580163956 CEST	443	49796	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.580789089 CEST	443	49795	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.580837965 CEST	49796	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.580862999 CEST	443	49796	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.581337929 CEST	49795	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.581371069 CEST	443	49795	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.581470966 CEST	443	49798	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.581475019 CEST	443	49794	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.581517935 CEST	49796	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.581525087 CEST	443	49796	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.581815958 CEST	443	49797	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.581890106 CEST	49798	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.581907988 CEST	443	49798	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.582093954 CEST	49795	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.582106113 CEST	443	49795	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.582367897 CEST	49797	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.582391977 CEST	443	49797	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.582550049 CEST	49798	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.582556009 CEST	443	49798	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.582870007 CEST	49794	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.582880020 CEST	443	49794	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.583075047 CEST	49797	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.583090067 CEST	443	49797	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.583440065 CEST	49794	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.583444118 CEST	443	49794	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.920726061 CEST	443	49796	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.920748949 CEST	443	49795	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.920799017 CEST	443	49796	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.920820951 CEST	443	49795	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.920834064 CEST	443	49797	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.920849085 CEST	443	49794	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.920876980 CEST	49796	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.920912981 CEST	443	49794	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.920943975 CEST	49795	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.920955896 CEST	49794	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.921058893 CEST	443	49797	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.921089888 CEST	443	49798	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.921116114 CEST	49797	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.921147108 CEST	49796	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.921169996 CEST	443	49796	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.921188116 CEST	49796	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.921195984 CEST	443	49796	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.921232939 CEST	443	49798	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.921375990 CEST	49797	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.921389103 CEST	49798	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.921422005 CEST	443	49797	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.921471119 CEST	49797	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.921488047 CEST	443	49797	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.922044039 CEST	49794	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.922060013 CEST	443	49794	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.922070026 CEST	49794	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.922075033 CEST	443	49794	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.922744036 CEST	49798	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.922754049 CEST	443	49798	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.922765970 CEST	49798	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.922770023 CEST	443	49798	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.922863007 CEST	49795	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.922880888 CEST	443	49795	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.922895908 CEST	49795	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.922903061 CEST	443	49795	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.926172018 CEST	49801	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.926211119 CEST	443	49801	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.926237106 CEST	49802	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.926265001 CEST	443	49802	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.926289082 CEST	49801	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.926305056 CEST	49802	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.927272081 CEST	49801	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.927285910 CEST	443	49801	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.927378893 CEST	49802	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.927391052 CEST	443	49802	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.927732944 CEST	49803	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.927752972 CEST	443	49803	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.928261995 CEST	49803	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.928343058 CEST	49803	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.928356886 CEST	443	49803	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.928637981 CEST	49804	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.928661108 CEST	443	49804	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.928749084 CEST	49805	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.928776979 CEST	443	49805	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.928878069 CEST	49804	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.928919077 CEST	49804	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.928934097 CEST	443	49804	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:05.928970098 CEST	49805	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.929049969 CEST	49805	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:05.929059982 CEST	443	49805	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.530654907 CEST	443	49800	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:06.530740023 CEST	49800	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:06.532958984 CEST	49800	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:06.532967091 CEST	443	49800	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:06.533287048 CEST	443	49800	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:06.535253048 CEST	49800	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:06.535317898 CEST	49800	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:06.535326004 CEST	443	49800	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:06.535463095 CEST	49800	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:06.547139883 CEST	443	49799	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:06.547216892 CEST	49799	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:06.548980951 CEST	49799	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:06.548988104 CEST	443	49799	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:06.549189091 CEST	443	49799	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:06.550527096 CEST	49799	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:06.550580978 CEST	49799	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:06.550585985 CEST	443	49799	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:06.550681114 CEST	49799	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:06.579332113 CEST	443	49800	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:06.591351032 CEST	443	49799	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:06.669440985 CEST	443	49804	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.670032978 CEST	49804	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.670041084 CEST	443	49804	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.670614958 CEST	49804	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.670619965 CEST	443	49804	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.674438953 CEST	443	49802	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.675004959 CEST	49802	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.675024033 CEST	443	49802	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.675429106 CEST	49802	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.675432920 CEST	443	49802	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.677469015 CEST	443	49801	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.677829981 CEST	49801	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.677864075 CEST	443	49801	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.678235054 CEST	49801	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.678241968 CEST	443	49801	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.684334993 CEST	443	49805	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.684688091 CEST	49805	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.684695959 CEST	443	49805	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.685084105 CEST	49805	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.685097933 CEST	443	49805	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.695594072 CEST	443	49803	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.696085930 CEST	49803	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.696109056 CEST	443	49803	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.696615934 CEST	49803	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.696623087 CEST	443	49803	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.791074038 CEST	443	49800	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:06.791716099 CEST	49800	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:06.791734934 CEST	443	49800	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:06.791754007 CEST	49800	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:06.791799068 CEST	49800	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:06.802186012 CEST	443	49799	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:06.804357052 CEST	443	49804	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.804418087 CEST	443	49804	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.804488897 CEST	49804	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.806794882 CEST	49799	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:06.806807041 CEST	443	49799	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:06.806951046 CEST	49799	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:06.807486057 CEST	49804	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.807501078 CEST	443	49804	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.810924053 CEST	443	49802	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.811100006 CEST	443	49802	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.811171055 CEST	49802	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.811253071 CEST	49802	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.811263084 CEST	443	49802	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.811340094 CEST	49802	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.811345100 CEST	443	49802	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.811783075 CEST	49806	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.811801910 CEST	443	49806	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.811868906 CEST	49806	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.812535048 CEST	49806	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.812545061 CEST	443	49806	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.813709974 CEST	49807	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.813733101 CEST	443	49801	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.813745975 CEST	443	49807	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.813813925 CEST	49807	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.813999891 CEST	49807	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.814013958 CEST	443	49807	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.814156055 CEST	443	49801	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.814271927 CEST	49801	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.814316034 CEST	49801	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.814333916 CEST	443	49801	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.814376116 CEST	49801	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.814384937 CEST	443	49801	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.816286087 CEST	49808	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.816312075 CEST	443	49808	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.816386938 CEST	49808	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.816576004 CEST	49808	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.816591978 CEST	443	49808	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.819457054 CEST	443	49805	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.819721937 CEST	443	49805	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.819780111 CEST	49805	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.819807053 CEST	49805	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.819818974 CEST	443	49805	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.819828033 CEST	49805	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.819832087 CEST	443	49805	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.821930885 CEST	49809	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.821943998 CEST	443	49809	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.822205067 CEST	49809	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.822336912 CEST	49809	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.822349072 CEST	443	49809	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.834043980 CEST	443	49803	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.834429979 CEST	443	49803	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.834512949 CEST	49803	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.834539890 CEST	49803	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.834563017 CEST	443	49803	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.834573984 CEST	49803	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.834579945 CEST	443	49803	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.836766005 CEST	49810	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.836782932 CEST	443	49810	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:06.836843967 CEST	49810	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.837011099 CEST	49810	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:06.837025881 CEST	443	49810	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.553080082 CEST	443	49807	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.554276943 CEST	49807	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.554294109 CEST	443	49807	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.554610968 CEST	49807	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.554616928 CEST	443	49807	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.567760944 CEST	443	49808	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.568258047 CEST	49808	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.568288088 CEST	443	49808	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.568906069 CEST	49808	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.568911076 CEST	443	49808	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.576117039 CEST	443	49806	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.576559067 CEST	443	49809	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.576613903 CEST	49806	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.576637030 CEST	443	49806	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.577220917 CEST	49809	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.577238083 CEST	443	49809	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.577461004 CEST	49809	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.577466011 CEST	443	49809	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.577534914 CEST	49806	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.577544928 CEST	443	49806	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.601526976 CEST	443	49810	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.602097034 CEST	49810	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.602117062 CEST	443	49810	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.602555990 CEST	49810	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.602564096 CEST	443	49810	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.688149929 CEST	443	49807	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.688498020 CEST	443	49807	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.688669920 CEST	49807	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.689824104 CEST	49807	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.689825058 CEST	49807	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.689850092 CEST	443	49807	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.689863920 CEST	443	49807	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.696338892 CEST	49811	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.696362972 CEST	443	49811	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.696599960 CEST	49811	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.697155952 CEST	49811	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.697166920 CEST	443	49811	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.704533100 CEST	443	49808	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.704587936 CEST	443	49808	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.704709053 CEST	49808	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.705250978 CEST	49808	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.705250978 CEST	49808	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.705284119 CEST	443	49808	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.705295086 CEST	443	49808	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.709734917 CEST	49812	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.709780931 CEST	443	49812	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.710042953 CEST	49812	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.710328102 CEST	49812	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.710342884 CEST	443	49812	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.712749958 CEST	443	49809	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.712893009 CEST	443	49809	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.713009119 CEST	49809	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.713421106 CEST	49809	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.713428020 CEST	443	49809	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.713459969 CEST	49809	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.713464022 CEST	443	49809	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.716355085 CEST	443	49806	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.716398954 CEST	443	49806	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.716468096 CEST	49806	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.716844082 CEST	49806	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.716856956 CEST	443	49806	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.716887951 CEST	49806	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.716893911 CEST	443	49806	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.720428944 CEST	49813	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.720443964 CEST	443	49813	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.720630884 CEST	49813	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.720679998 CEST	49813	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.720686913 CEST	443	49813	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.723735094 CEST	49814	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.723752975 CEST	443	49814	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.724047899 CEST	49814	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.724410057 CEST	49814	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.724425077 CEST	443	49814	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.739470005 CEST	443	49810	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.739507914 CEST	443	49810	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.739588976 CEST	49810	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.740072012 CEST	49810	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.740087986 CEST	443	49810	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.744005919 CEST	49815	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.744024992 CEST	443	49815	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:07.744194984 CEST	49815	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.744731903 CEST	49815	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:07.744741917 CEST	443	49815	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.452421904 CEST	443	49811	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.453557014 CEST	49811	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.453571081 CEST	443	49811	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.454617977 CEST	49811	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.454622030 CEST	443	49811	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.480201960 CEST	443	49812	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.480865955 CEST	49812	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.480890989 CEST	443	49812	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.481398106 CEST	49812	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.481412888 CEST	443	49812	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.491173029 CEST	443	49814	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.492218018 CEST	49814	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.492239952 CEST	443	49814	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.493371010 CEST	49814	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.493376017 CEST	443	49814	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.498018980 CEST	443	49813	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.498058081 CEST	443	49815	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.498411894 CEST	49813	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.498420000 CEST	443	49813	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.501540899 CEST	49813	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.501544952 CEST	443	49813	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.524615049 CEST	49815	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.524621964 CEST	443	49815	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.526281118 CEST	49815	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.526284933 CEST	443	49815	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.593065023 CEST	443	49811	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.593199015 CEST	443	49811	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.593296051 CEST	49811	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.593732119 CEST	49811	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.593743086 CEST	443	49811	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.593771935 CEST	49811	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.593779087 CEST	443	49811	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.600411892 CEST	49816	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.600476027 CEST	443	49816	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.600632906 CEST	49816	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.601268053 CEST	49816	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.601296902 CEST	443	49816	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.626136065 CEST	443	49814	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.628010988 CEST	443	49814	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.628082991 CEST	49814	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.628110886 CEST	49814	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.628129959 CEST	443	49814	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.628146887 CEST	49814	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.628153086 CEST	443	49814	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.629268885 CEST	443	49812	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.629484892 CEST	443	49812	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.629595995 CEST	49812	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.629631996 CEST	49812	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.629636049 CEST	443	49812	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.629646063 CEST	49812	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.629648924 CEST	443	49812	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.630959034 CEST	49817	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.630996943 CEST	443	49817	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.631171942 CEST	49817	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.631300926 CEST	49817	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.631318092 CEST	443	49817	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.631784916 CEST	49818	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.631824970 CEST	443	49818	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.631895065 CEST	49818	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.632024050 CEST	49818	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.632050991 CEST	443	49818	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.637702942 CEST	443	49813	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.637762070 CEST	443	49813	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.637880087 CEST	49813	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.637955904 CEST	49813	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.637970924 CEST	443	49813	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.637986898 CEST	49813	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.637993097 CEST	443	49813	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.640089035 CEST	49819	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.640100002 CEST	443	49819	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.640178919 CEST	49819	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.640646935 CEST	49819	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.640655994 CEST	443	49819	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.656286955 CEST	443	49815	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.656346083 CEST	443	49815	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.656419039 CEST	49815	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.656553030 CEST	49815	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.656553030 CEST	49815	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.656558990 CEST	443	49815	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.656567097 CEST	443	49815	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.658742905 CEST	49820	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.658844948 CEST	443	49820	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:08.658941984 CEST	49820	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.659101009 CEST	49820	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:08.659143925 CEST	443	49820	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.365884066 CEST	443	49816	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.366724014 CEST	49816	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.366777897 CEST	443	49816	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.367966890 CEST	49816	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.367980957 CEST	443	49816	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.398533106 CEST	443	49818	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.399401903 CEST	49818	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.399444103 CEST	443	49818	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.400288105 CEST	49818	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.400295019 CEST	443	49818	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.400928974 CEST	443	49820	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.401751041 CEST	49820	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.401763916 CEST	443	49820	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.402900934 CEST	49820	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.402908087 CEST	443	49820	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.403934956 CEST	443	49817	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.404608011 CEST	49817	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.404627085 CEST	443	49817	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.405498981 CEST	443	49819	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.405605078 CEST	49817	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.405611038 CEST	443	49817	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.406380892 CEST	49819	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.406387091 CEST	443	49819	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.407001019 CEST	49819	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.407004118 CEST	443	49819	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.508748055 CEST	443	49816	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.509049892 CEST	443	49816	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.509119034 CEST	49816	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.509368896 CEST	49816	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.509368896 CEST	49816	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.509399891 CEST	443	49816	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.509422064 CEST	443	49816	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.514456987 CEST	49821	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.514481068 CEST	443	49821	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.514573097 CEST	49821	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.514858961 CEST	49821	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.514872074 CEST	443	49821	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.535293102 CEST	443	49820	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.535449982 CEST	443	49820	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.535543919 CEST	49820	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.538316011 CEST	443	49818	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.538476944 CEST	443	49818	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.538551092 CEST	49818	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.539983034 CEST	49820	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.539998055 CEST	443	49820	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.541799068 CEST	49818	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.541806936 CEST	443	49818	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.541821957 CEST	49818	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.541827917 CEST	443	49818	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.542143106 CEST	443	49817	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.542222977 CEST	443	49817	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.542273045 CEST	49817	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.543437004 CEST	49817	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.543447018 CEST	443	49817	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.543456078 CEST	49817	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.543461084 CEST	443	49817	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.545234919 CEST	443	49819	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.545353889 CEST	443	49819	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.545528889 CEST	49819	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.548674107 CEST	49822	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.548696995 CEST	443	49822	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.548949003 CEST	49822	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.549465895 CEST	49819	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.549472094 CEST	443	49819	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.549484968 CEST	49819	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.549489021 CEST	443	49819	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.551779032 CEST	49822	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.551794052 CEST	443	49822	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.554068089 CEST	49823	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.554081917 CEST	443	49823	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.554199934 CEST	49823	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.555634975 CEST	49824	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.555669069 CEST	443	49824	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.555769920 CEST	49824	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.556158066 CEST	49824	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.556170940 CEST	443	49824	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.557491064 CEST	49825	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.557512999 CEST	443	49825	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.557594061 CEST	49825	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.558193922 CEST	49823	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.558206081 CEST	443	49823	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:09.558414936 CEST	49825	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:09.558425903 CEST	443	49825	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.276504040 CEST	443	49821	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.277236938 CEST	49821	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.277264118 CEST	443	49821	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.277873039 CEST	49821	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.277879000 CEST	443	49821	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.299079895 CEST	443	49824	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.299828053 CEST	49824	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.299854040 CEST	443	49824	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.300651073 CEST	49824	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.300657988 CEST	443	49824	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.319696903 CEST	443	49823	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.320282936 CEST	49823	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.320291042 CEST	443	49823	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.320375919 CEST	443	49822	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.320740938 CEST	49823	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.320745945 CEST	443	49823	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.321264029 CEST	49822	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.321331024 CEST	443	49822	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.321806908 CEST	49822	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.321822882 CEST	443	49822	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.370589972 CEST	443	49825	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.371195078 CEST	49825	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.371226072 CEST	443	49825	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.371740103 CEST	49825	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.371747017 CEST	443	49825	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.414273977 CEST	443	49821	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.414292097 CEST	443	49821	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.414355993 CEST	49821	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.414369106 CEST	443	49821	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.414422989 CEST	443	49821	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.414531946 CEST	49821	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.414791107 CEST	49821	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.414803982 CEST	443	49821	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.414817095 CEST	49821	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.414822102 CEST	443	49821	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.418349028 CEST	49826	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.418390036 CEST	443	49826	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.418541908 CEST	49826	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.418823004 CEST	49826	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.418836117 CEST	443	49826	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.435189009 CEST	443	49824	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.435208082 CEST	443	49824	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.435245991 CEST	443	49824	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.435255051 CEST	49824	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.435306072 CEST	49824	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.435569048 CEST	49824	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.435569048 CEST	49824	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.435594082 CEST	443	49824	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.435604095 CEST	443	49824	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.439249992 CEST	49827	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.439282894 CEST	443	49827	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.439352989 CEST	49827	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.439707041 CEST	49827	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.439718962 CEST	443	49827	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.460150957 CEST	443	49822	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.460210085 CEST	443	49822	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.460341930 CEST	49822	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.460566998 CEST	49822	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.460616112 CEST	443	49822	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.460649014 CEST	49822	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.460665941 CEST	443	49822	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.463814974 CEST	49828	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.463855982 CEST	443	49828	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.464077950 CEST	49828	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.464298964 CEST	49828	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.464307070 CEST	443	49828	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.508941889 CEST	443	49823	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.509114027 CEST	443	49823	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.509166956 CEST	49823	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.509313107 CEST	49823	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.509326935 CEST	443	49823	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.509335995 CEST	49823	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.509340048 CEST	443	49823	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.513559103 CEST	49829	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.513591051 CEST	443	49829	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.513783932 CEST	49829	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.514080048 CEST	49829	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.514097929 CEST	443	49829	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.539741993 CEST	443	49825	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.539762020 CEST	443	49825	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.539829969 CEST	49825	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.539860010 CEST	443	49825	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.539952040 CEST	443	49825	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.539963007 CEST	49825	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.540096045 CEST	49825	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.540110111 CEST	443	49825	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.540127039 CEST	49825	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.540127039 CEST	49825	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.540132999 CEST	443	49825	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.540139914 CEST	443	49825	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.543003082 CEST	49830	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.543045998 CEST	443	49830	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:10.543329000 CEST	49830	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.543373108 CEST	49830	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:10.543399096 CEST	443	49830	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.169866085 CEST	443	49826	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.170547962 CEST	49826	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.170576096 CEST	443	49826	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.171389103 CEST	49826	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.171395063 CEST	443	49826	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.207540035 CEST	443	49827	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.208539009 CEST	49827	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.208564997 CEST	443	49827	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.209546089 CEST	49827	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.209551096 CEST	443	49827	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.229645967 CEST	443	49828	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.230514050 CEST	49828	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.230530977 CEST	443	49828	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.231342077 CEST	49828	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.231347084 CEST	443	49828	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.265081882 CEST	443	49829	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.275999069 CEST	49829	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.276020050 CEST	443	49829	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.277012110 CEST	49829	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.277017117 CEST	443	49829	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.306382895 CEST	443	49826	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.306406975 CEST	443	49826	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.306467056 CEST	443	49826	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.306479931 CEST	49826	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.306535959 CEST	49826	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.306884050 CEST	49826	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.306884050 CEST	49826	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.306904078 CEST	443	49826	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.306910992 CEST	443	49826	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.309097052 CEST	443	49830	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.311346054 CEST	49831	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.311384916 CEST	443	49831	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.311579943 CEST	49831	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.312184095 CEST	49830	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.312195063 CEST	443	49830	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.312918901 CEST	49830	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.312925100 CEST	443	49830	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.313213110 CEST	49831	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.313225985 CEST	443	49831	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.347471952 CEST	443	49827	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.347537041 CEST	443	49827	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.347613096 CEST	49827	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.360517025 CEST	49827	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.360528946 CEST	443	49827	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.360538006 CEST	49827	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.360542059 CEST	443	49827	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.366621017 CEST	49832	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.366679907 CEST	443	49832	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.366880894 CEST	49832	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.367153883 CEST	49832	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.367181063 CEST	443	49832	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.368232012 CEST	443	49828	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.368336916 CEST	443	49828	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.368531942 CEST	49828	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.369483948 CEST	49828	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.369483948 CEST	49828	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.369499922 CEST	443	49828	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.369508982 CEST	443	49828	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.374295950 CEST	49833	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.374317884 CEST	443	49833	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.374443054 CEST	49833	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.375490904 CEST	49833	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.375507116 CEST	443	49833	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.409416914 CEST	443	49829	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.409493923 CEST	443	49829	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.409751892 CEST	49829	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.410381079 CEST	49829	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.410397053 CEST	443	49829	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.410420895 CEST	49829	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.410424948 CEST	443	49829	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.415749073 CEST	49834	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.415811062 CEST	443	49834	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.415940046 CEST	49834	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.416342020 CEST	49834	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.416373968 CEST	443	49834	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.450489998 CEST	443	49830	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.450625896 CEST	443	49830	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.450934887 CEST	49830	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.451163054 CEST	49830	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.451180935 CEST	443	49830	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.451190948 CEST	49830	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.451196909 CEST	443	49830	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.456203938 CEST	49835	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.456228018 CEST	443	49835	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:11.456311941 CEST	49835	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.457215071 CEST	49835	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:11.457225084 CEST	443	49835	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.202645063 CEST	443	49833	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.203015089 CEST	443	49832	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.203388929 CEST	49833	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.203404903 CEST	443	49833	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.203608036 CEST	49832	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.203629017 CEST	443	49832	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.204065084 CEST	49833	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.204071999 CEST	443	49833	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.204129934 CEST	49832	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.204134941 CEST	443	49832	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.204284906 CEST	443	49834	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.204670906 CEST	49834	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.204678059 CEST	443	49834	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.205127001 CEST	49834	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.205131054 CEST	443	49834	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.207510948 CEST	443	49835	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.207895041 CEST	49835	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.207907915 CEST	443	49835	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.208393097 CEST	49835	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.208398104 CEST	443	49835	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.217772961 CEST	443	49831	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.219096899 CEST	49831	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.219106913 CEST	443	49831	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.220258951 CEST	49831	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.220271111 CEST	443	49831	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.345010996 CEST	443	49833	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.345083952 CEST	443	49833	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.345143080 CEST	49833	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.345376015 CEST	49833	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.345376968 CEST	49833	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.345391035 CEST	443	49833	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.345397949 CEST	443	49833	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.346466064 CEST	443	49832	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.346508980 CEST	443	49832	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.346661091 CEST	49832	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.346795082 CEST	49832	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.346810102 CEST	443	49832	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.346820116 CEST	49832	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.346823931 CEST	443	49832	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.346853018 CEST	443	49835	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.347024918 CEST	443	49835	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.347079992 CEST	49835	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.347260952 CEST	443	49834	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.347310066 CEST	443	49834	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.347356081 CEST	49835	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.347363949 CEST	443	49835	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.347371101 CEST	49835	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.347374916 CEST	443	49835	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.347377062 CEST	49834	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.348593950 CEST	49834	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.348598003 CEST	443	49834	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.348781109 CEST	49836	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.348860025 CEST	443	49836	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.348934889 CEST	49836	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.349139929 CEST	49836	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.349175930 CEST	443	49836	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.350307941 CEST	49837	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.350337982 CEST	443	49837	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.350440025 CEST	49837	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.350555897 CEST	49837	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.350568056 CEST	443	49837	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.350794077 CEST	49838	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.350815058 CEST	443	49838	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.351083040 CEST	49838	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.351253986 CEST	49839	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.351265907 CEST	443	49839	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.351311922 CEST	49838	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.351329088 CEST	49839	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.351339102 CEST	443	49838	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.351425886 CEST	49839	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.351435900 CEST	443	49839	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.369743109 CEST	443	49831	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.369823933 CEST	443	49831	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.369924068 CEST	49831	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.370066881 CEST	49831	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.370066881 CEST	49831	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.370075941 CEST	443	49831	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.370090961 CEST	443	49831	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.371984005 CEST	49840	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.371997118 CEST	443	49840	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:12.372067928 CEST	49840	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.372183084 CEST	49840	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:12.372193098 CEST	443	49840	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.093221903 CEST	443	49836	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.094273090 CEST	49836	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.094341993 CEST	443	49836	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.094693899 CEST	49836	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.094710112 CEST	443	49836	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.101814032 CEST	443	49839	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.102272034 CEST	49839	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.102293015 CEST	443	49839	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.102755070 CEST	49839	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.102760077 CEST	443	49839	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.132805109 CEST	443	49837	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.133481026 CEST	49837	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.133493900 CEST	443	49837	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.133727074 CEST	443	49838	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.134048939 CEST	49837	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.134052992 CEST	443	49837	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.134337902 CEST	49838	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.134403944 CEST	443	49838	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.134780884 CEST	443	49840	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.134797096 CEST	49838	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.134813070 CEST	443	49838	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.135147095 CEST	49840	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.135163069 CEST	443	49840	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.135463953 CEST	49840	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.135468960 CEST	443	49840	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.229407072 CEST	443	49836	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.229465008 CEST	443	49836	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.229598045 CEST	49836	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.229830980 CEST	49836	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.229830980 CEST	49836	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.229878902 CEST	443	49836	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.229893923 CEST	443	49836	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.232743025 CEST	49841	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.232773066 CEST	443	49841	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.232835054 CEST	49841	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.233012915 CEST	49841	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.233026028 CEST	443	49841	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.256639957 CEST	443	49839	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.256690025 CEST	443	49839	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.256763935 CEST	49839	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.256779909 CEST	443	49839	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.256880045 CEST	443	49839	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.256937027 CEST	49839	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.257023096 CEST	49839	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.257035017 CEST	443	49839	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.257051945 CEST	49839	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.257056952 CEST	443	49839	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.259908915 CEST	49842	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.259936094 CEST	443	49842	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.260006905 CEST	49842	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.260215998 CEST	49842	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.260231018 CEST	443	49842	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.270031929 CEST	443	49840	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.270097017 CEST	443	49840	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.270265102 CEST	49840	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.270304918 CEST	49840	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.270318031 CEST	443	49840	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.270327091 CEST	49840	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.270330906 CEST	443	49840	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.272557974 CEST	443	49837	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.272874117 CEST	49843	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.272887945 CEST	443	49843	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.272953033 CEST	49843	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.273061037 CEST	443	49837	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.273113966 CEST	49837	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.273135900 CEST	49837	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.273144007 CEST	443	49837	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.273169041 CEST	49843	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.273171902 CEST	49837	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.273176908 CEST	443	49837	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.273179054 CEST	443	49843	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.273395061 CEST	443	49838	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.273416996 CEST	443	49838	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.273462057 CEST	443	49838	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.273472071 CEST	49838	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.273587942 CEST	49838	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.273587942 CEST	49838	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.273623943 CEST	443	49838	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.273663044 CEST	49838	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.273678064 CEST	443	49838	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.276001930 CEST	49844	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.276021004 CEST	443	49844	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.276143074 CEST	49845	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.276169062 CEST	49844	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.276195049 CEST	443	49845	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.276287079 CEST	49845	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.276345968 CEST	49844	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.276357889 CEST	443	49844	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.276494980 CEST	49845	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.276529074 CEST	443	49845	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.992738008 CEST	443	49841	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.993371964 CEST	49841	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.993396997 CEST	443	49841	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:13.994291067 CEST	49841	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:13.994297028 CEST	443	49841	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.030400991 CEST	443	49842	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.031126976 CEST	49842	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.031142950 CEST	443	49842	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.031616926 CEST	49842	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.031621933 CEST	443	49842	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.041656971 CEST	443	49844	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.042157888 CEST	49844	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.042190075 CEST	443	49844	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.042515039 CEST	443	49845	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.042588949 CEST	49844	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.042596102 CEST	443	49844	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.042850018 CEST	443	49843	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.043051958 CEST	49845	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.043091059 CEST	443	49845	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.043371916 CEST	49843	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.043400049 CEST	443	49843	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.043555975 CEST	49845	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.043565035 CEST	443	49845	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.043912888 CEST	49843	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.043919086 CEST	443	49843	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.132414103 CEST	443	49841	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.132477999 CEST	443	49841	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.132628918 CEST	49841	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.132930994 CEST	49841	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.132947922 CEST	443	49841	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.132961035 CEST	49841	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.132966042 CEST	443	49841	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.136595011 CEST	49846	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.136640072 CEST	443	49846	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.136734962 CEST	49846	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.136858940 CEST	49846	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.136864901 CEST	443	49846	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.170449018 CEST	443	49842	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.170854092 CEST	443	49842	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.170939922 CEST	49842	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.171014071 CEST	49842	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.171029091 CEST	443	49842	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.171039104 CEST	49842	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.171044111 CEST	443	49842	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.174280882 CEST	49847	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.174321890 CEST	443	49847	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.174597979 CEST	49847	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.174824953 CEST	49847	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.174854994 CEST	443	49847	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.179461956 CEST	443	49844	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.179622889 CEST	443	49844	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.179708004 CEST	49844	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.179742098 CEST	49844	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.179754019 CEST	443	49844	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.179764986 CEST	49844	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.179769993 CEST	443	49844	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.182233095 CEST	443	49843	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.182321072 CEST	443	49843	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.182415962 CEST	443	49843	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.182471991 CEST	49843	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.182687998 CEST	49843	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.182697058 CEST	443	49843	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.182708025 CEST	49843	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.182712078 CEST	443	49843	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.183192015 CEST	49848	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.183217049 CEST	443	49848	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.183345079 CEST	49848	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.183443069 CEST	49848	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.183454037 CEST	443	49848	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.185566902 CEST	49849	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.185599089 CEST	443	49849	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.185751915 CEST	49849	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.185945034 CEST	49849	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.185956955 CEST	443	49849	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.244973898 CEST	443	49845	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.246517897 CEST	443	49845	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.246587038 CEST	49845	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.246653080 CEST	49845	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.246680975 CEST	443	49845	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.246722937 CEST	49845	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.246736050 CEST	443	49845	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.249922037 CEST	49850	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.249958038 CEST	443	49850	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.250039101 CEST	49850	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.250207901 CEST	49850	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.250221968 CEST	443	49850	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.883630037 CEST	443	49846	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.884347916 CEST	49846	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.884382010 CEST	443	49846	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.884855032 CEST	49846	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.884865046 CEST	443	49846	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.937906027 CEST	443	49849	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.938601017 CEST	49849	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.938625097 CEST	443	49849	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.939104080 CEST	49849	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.939110041 CEST	443	49849	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.941528082 CEST	443	49848	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.941921949 CEST	49848	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.941936970 CEST	443	49848	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:14.942512035 CEST	49848	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:14.942517042 CEST	443	49848	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.002294064 CEST	443	49850	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.002881050 CEST	49850	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.002902031 CEST	443	49850	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.003350019 CEST	49850	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.003355980 CEST	443	49850	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.020546913 CEST	443	49846	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.020740032 CEST	443	49846	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.020812035 CEST	49846	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.020849943 CEST	49846	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.020849943 CEST	49846	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.020874023 CEST	443	49846	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.020880938 CEST	443	49846	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.023907900 CEST	49851	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.023941040 CEST	443	49851	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.024270058 CEST	49851	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.024466991 CEST	49851	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.024490118 CEST	443	49851	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.048979998 CEST	443	49847	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.049937010 CEST	49847	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.049981117 CEST	443	49847	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.050535917 CEST	49847	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.050543070 CEST	443	49847	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.079062939 CEST	443	49848	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.079185009 CEST	443	49848	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.079257011 CEST	49848	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.079540014 CEST	49848	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.079555035 CEST	443	49848	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.079566956 CEST	49848	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.079571962 CEST	443	49848	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.082865000 CEST	49852	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.082885027 CEST	443	49852	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.082963943 CEST	49852	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.083157063 CEST	49852	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.083168030 CEST	443	49852	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.097860098 CEST	443	49849	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.098037004 CEST	443	49849	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.098098993 CEST	443	49849	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.098102093 CEST	49849	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.098184109 CEST	49849	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.098223925 CEST	49849	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.098223925 CEST	49849	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.098237991 CEST	443	49849	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.098257065 CEST	443	49849	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.100811958 CEST	49853	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.100850105 CEST	443	49853	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.100958109 CEST	49853	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.101178885 CEST	49853	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.101191044 CEST	443	49853	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.141932964 CEST	443	49850	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.141977072 CEST	443	49850	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.142056942 CEST	49850	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.142227888 CEST	49850	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.142235041 CEST	443	49850	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.142246962 CEST	49850	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.142252922 CEST	443	49850	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.145222902 CEST	49854	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.145241022 CEST	443	49854	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.145306110 CEST	49854	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.145486116 CEST	49854	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.145502090 CEST	443	49854	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.187649965 CEST	443	49847	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.187665939 CEST	443	49847	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.187701941 CEST	443	49847	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.187736988 CEST	49847	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.189930916 CEST	49847	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.189930916 CEST	49847	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.189932108 CEST	49847	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.191343069 CEST	49855	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.191386938 CEST	443	49855	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.191730976 CEST	49855	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.193110943 CEST	49855	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.193139076 CEST	443	49855	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.499663115 CEST	49847	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.499692917 CEST	443	49847	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.782291889 CEST	443	49851	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.806169033 CEST	49851	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.806193113 CEST	443	49851	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.807795048 CEST	49851	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.807800055 CEST	443	49851	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.855528116 CEST	443	49852	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.856956959 CEST	49852	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.856966972 CEST	443	49852	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.857702971 CEST	49852	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.857707024 CEST	443	49852	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.871563911 CEST	443	49853	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.872731924 CEST	49853	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.872741938 CEST	443	49853	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.873950958 CEST	49853	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.873959064 CEST	443	49853	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.907946110 CEST	443	49854	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.908647060 CEST	49854	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.908668995 CEST	443	49854	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.909730911 CEST	49854	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.909735918 CEST	443	49854	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.940572977 CEST	443	49851	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.940664053 CEST	443	49851	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.940783978 CEST	49851	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.941335917 CEST	49851	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.941366911 CEST	443	49851	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.941395044 CEST	49851	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.941401005 CEST	443	49851	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.945540905 CEST	49856	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.945585012 CEST	443	49856	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.945699930 CEST	49856	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.945914030 CEST	49856	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.945930004 CEST	443	49856	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.947825909 CEST	443	49855	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.948688030 CEST	49855	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.948698997 CEST	443	49855	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.949719906 CEST	49855	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.949728012 CEST	443	49855	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.993392944 CEST	443	49852	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.993622065 CEST	443	49852	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.993856907 CEST	49852	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.994368076 CEST	49852	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.994368076 CEST	49852	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:15.994394064 CEST	443	49852	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:15.994405985 CEST	443	49852	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.001516104 CEST	49857	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.001553059 CEST	443	49857	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.001720905 CEST	49857	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.002216101 CEST	49857	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.002230883 CEST	443	49857	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.008280993 CEST	443	49853	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.008363962 CEST	443	49853	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.008418083 CEST	443	49853	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.008434057 CEST	49853	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.008488894 CEST	49853	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.008801937 CEST	49853	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.008817911 CEST	443	49853	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.008831024 CEST	49853	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.008836985 CEST	443	49853	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.012849092 CEST	49858	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.012871981 CEST	443	49858	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.013782024 CEST	49858	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.014015913 CEST	49858	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.014027119 CEST	443	49858	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.047848940 CEST	443	49854	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.047908068 CEST	443	49854	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.048618078 CEST	49854	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.074894905 CEST	49854	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.074912071 CEST	443	49854	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.074927092 CEST	49854	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.074934959 CEST	443	49854	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.081260920 CEST	49859	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.081283092 CEST	443	49859	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.081600904 CEST	49859	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.081600904 CEST	49859	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.081631899 CEST	443	49859	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.086158991 CEST	443	49855	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.086211920 CEST	443	49855	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.086472034 CEST	49855	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.086810112 CEST	49855	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.086847067 CEST	443	49855	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.086864948 CEST	49855	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.086874008 CEST	443	49855	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.091484070 CEST	49860	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.091526031 CEST	443	49860	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.091629982 CEST	49860	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.092099905 CEST	49860	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.092138052 CEST	443	49860	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.689826012 CEST	443	49856	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.690515041 CEST	49856	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.690531969 CEST	443	49856	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.691004992 CEST	49856	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.691010952 CEST	443	49856	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.774816990 CEST	443	49857	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.775608063 CEST	49857	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.775635004 CEST	443	49857	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.776336908 CEST	49857	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.776345015 CEST	443	49857	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.781338930 CEST	443	49858	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.781845093 CEST	49858	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.781857967 CEST	443	49858	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.782309055 CEST	49858	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.782326937 CEST	443	49858	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.826982975 CEST	443	49856	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.827054024 CEST	443	49856	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.827337980 CEST	49856	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.827569962 CEST	49856	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.827591896 CEST	443	49856	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.827630997 CEST	49856	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.827641010 CEST	443	49856	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.831252098 CEST	49861	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.831291914 CEST	443	49861	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.831458092 CEST	49861	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.831691027 CEST	49861	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.831705093 CEST	443	49861	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.840210915 CEST	443	49859	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.840822935 CEST	49859	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.840833902 CEST	443	49859	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.841483116 CEST	49859	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.841490030 CEST	443	49859	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.862524986 CEST	443	49860	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.863070965 CEST	49860	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.863091946 CEST	443	49860	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.863569975 CEST	49860	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.863579035 CEST	443	49860	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.918402910 CEST	443	49858	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.918521881 CEST	443	49858	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.918574095 CEST	49858	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.918812037 CEST	49858	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.918826103 CEST	443	49858	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.918896914 CEST	49858	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.918915987 CEST	443	49858	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.922564983 CEST	49862	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.922615051 CEST	443	49862	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.922768116 CEST	49862	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.922986031 CEST	49862	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.923017025 CEST	443	49862	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.924608946 CEST	443	49857	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.924773932 CEST	443	49857	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.924815893 CEST	443	49857	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.924835920 CEST	49857	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.924942970 CEST	49857	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.924942970 CEST	49857	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.924968958 CEST	49857	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.924985886 CEST	443	49857	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.927572966 CEST	49863	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.927589893 CEST	443	49863	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.927659035 CEST	49863	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.927845001 CEST	49863	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.927855015 CEST	443	49863	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.977078915 CEST	443	49859	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.977125883 CEST	443	49859	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.977246046 CEST	49859	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.977916956 CEST	49859	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.977937937 CEST	443	49859	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.977971077 CEST	49859	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.977977991 CEST	443	49859	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.985286951 CEST	49864	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.985387087 CEST	443	49864	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.985487938 CEST	49864	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.986078978 CEST	49864	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:16.986115932 CEST	443	49864	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.999505997 CEST	443	49860	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.999825954 CEST	443	49860	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:16.999910116 CEST	49860	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.000436068 CEST	49860	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.000436068 CEST	49860	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.000454903 CEST	443	49860	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.000466108 CEST	443	49860	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.004179955 CEST	49865	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.004220009 CEST	443	49865	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.004488945 CEST	49865	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.004679918 CEST	49865	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.004692078 CEST	443	49865	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.584935904 CEST	443	49861	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.586098909 CEST	49861	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.586118937 CEST	443	49861	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.586971045 CEST	49861	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.586976051 CEST	443	49861	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.675458908 CEST	443	49863	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.676091909 CEST	49863	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.676115036 CEST	443	49863	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.676891088 CEST	49863	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.676897049 CEST	443	49863	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.681948900 CEST	443	49862	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.682714939 CEST	49862	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.682758093 CEST	443	49862	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.683888912 CEST	49862	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.683897018 CEST	443	49862	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.724548101 CEST	443	49861	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.724581003 CEST	443	49861	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.724642038 CEST	443	49861	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.724659920 CEST	49861	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.724698067 CEST	49861	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.752360106 CEST	443	49865	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.756887913 CEST	443	49864	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.761895895 CEST	49861	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.761919022 CEST	443	49861	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.761929989 CEST	49861	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.761935949 CEST	443	49861	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.796542883 CEST	49865	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.796555996 CEST	49864	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.812053919 CEST	443	49863	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.813292980 CEST	443	49863	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.813342094 CEST	49863	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.818700075 CEST	443	49862	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.818797112 CEST	443	49862	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.818850994 CEST	49862	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.839077950 CEST	49863	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.839078903 CEST	49863	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.839097977 CEST	443	49863	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.839111090 CEST	443	49863	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.885052919 CEST	49862	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.885077000 CEST	443	49862	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.885102034 CEST	49862	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.885111094 CEST	443	49862	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.890665054 CEST	49865	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.890681982 CEST	443	49865	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.891896963 CEST	49865	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.891901016 CEST	443	49865	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.892342091 CEST	49864	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.892359018 CEST	443	49864	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.893374920 CEST	49864	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.893388033 CEST	443	49864	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.902410984 CEST	49866	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.902489901 CEST	443	49866	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.902570963 CEST	49866	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.902988911 CEST	49866	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.903019905 CEST	443	49866	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.904757023 CEST	49867	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.904783010 CEST	443	49867	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.904850960 CEST	49867	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.905658007 CEST	49868	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.905703068 CEST	443	49868	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.905774117 CEST	49868	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.905903101 CEST	49868	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.905920982 CEST	443	49868	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.906594038 CEST	49867	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:17.906605005 CEST	443	49867	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:17.915702105 CEST	443	49763	23.1.237.91	192.168.2.5
Oct 24, 2024 18:16:17.915766954 CEST	49763	443	192.168.2.5	23.1.237.91
Oct 24, 2024 18:16:18.024208069 CEST	443	49865	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.024724960 CEST	443	49865	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.024787903 CEST	443	49865	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.024790049 CEST	49865	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.024842024 CEST	49865	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.025640011 CEST	49865	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.025657892 CEST	443	49865	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.026751041 CEST	443	49864	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.026807070 CEST	443	49864	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.026947021 CEST	49864	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.028331041 CEST	49864	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.028356075 CEST	443	49864	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.028381109 CEST	49864	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.028395891 CEST	443	49864	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.034176111 CEST	49869	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.034207106 CEST	443	49869	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.034449100 CEST	49869	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.038768053 CEST	49869	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.038777113 CEST	443	49869	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.041595936 CEST	49870	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.041635990 CEST	443	49870	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.041713953 CEST	49870	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.041965008 CEST	49870	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.041979074 CEST	443	49870	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.674185038 CEST	443	49867	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.675169945 CEST	49867	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.675189972 CEST	443	49867	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.676645041 CEST	49867	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.676649094 CEST	443	49867	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.677375078 CEST	443	49866	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.678267002 CEST	49866	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.678338051 CEST	443	49866	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.679238081 CEST	49866	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.679251909 CEST	443	49866	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.681451082 CEST	443	49868	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.682204962 CEST	49868	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.682266951 CEST	443	49868	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.682969093 CEST	49868	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.682984114 CEST	443	49868	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.801631927 CEST	443	49869	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.812015057 CEST	443	49870	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.813021898 CEST	443	49867	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.813055038 CEST	443	49867	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.813111067 CEST	443	49867	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.813124895 CEST	49867	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.813159943 CEST	49867	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.817673922 CEST	443	49866	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.817749977 CEST	443	49866	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.817832947 CEST	49866	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.821995020 CEST	443	49868	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.822108030 CEST	443	49868	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.822164059 CEST	49868	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.822684050 CEST	49869	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.822700024 CEST	443	49869	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.824074984 CEST	49869	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.824084997 CEST	443	49869	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.824558973 CEST	49866	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.824600935 CEST	443	49866	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.824768066 CEST	49868	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.824768066 CEST	49868	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.824814081 CEST	443	49868	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.824843884 CEST	443	49868	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.830391884 CEST	49870	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.830415964 CEST	443	49870	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.831334114 CEST	49870	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.831347942 CEST	443	49870	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.831367016 CEST	49867	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.831381083 CEST	443	49867	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.831391096 CEST	49867	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.831394911 CEST	443	49867	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.832793951 CEST	49871	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.832825899 CEST	443	49871	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.832921028 CEST	49871	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.833600998 CEST	49871	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.833622932 CEST	443	49871	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.843018055 CEST	49872	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.843034983 CEST	443	49872	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.843097925 CEST	49872	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.844266891 CEST	49872	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.844276905 CEST	443	49872	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.845411062 CEST	49873	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.845468044 CEST	443	49873	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.845541000 CEST	49873	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.845702887 CEST	49873	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.845736027 CEST	443	49873	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.958192110 CEST	443	49869	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.958235025 CEST	443	49869	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.958291054 CEST	443	49869	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.958306074 CEST	49869	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.958350897 CEST	49869	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.958887100 CEST	49869	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.958900928 CEST	443	49869	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.958914042 CEST	49869	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.958918095 CEST	443	49869	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.963429928 CEST	49874	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.963458061 CEST	443	49874	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.963659048 CEST	49874	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.963908911 CEST	49874	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.963918924 CEST	443	49874	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.967705965 CEST	443	49870	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.967874050 CEST	443	49870	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.967978001 CEST	49870	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.968147039 CEST	49870	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.968174934 CEST	443	49870	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.968199968 CEST	49870	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.968214989 CEST	443	49870	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.974028111 CEST	49875	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.974121094 CEST	443	49875	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:18.974209070 CEST	49875	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.974574089 CEST	49875	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:18.974611998 CEST	443	49875	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.586024046 CEST	443	49871	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.586590052 CEST	49871	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.586607933 CEST	443	49871	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.587162971 CEST	49871	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.587172031 CEST	443	49871	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.592792034 CEST	443	49872	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.593194962 CEST	49872	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.593220949 CEST	443	49872	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.593652964 CEST	49872	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.593657970 CEST	443	49872	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.606267929 CEST	443	49873	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.606821060 CEST	49873	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.606873035 CEST	443	49873	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.607249975 CEST	49873	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.607263088 CEST	443	49873	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.721589088 CEST	443	49874	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.722122908 CEST	49874	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.722152948 CEST	443	49874	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.722623110 CEST	49874	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.722628117 CEST	443	49874	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.723428011 CEST	443	49871	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.723889112 CEST	443	49871	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.723942041 CEST	49871	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.723952055 CEST	443	49871	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.724008083 CEST	49871	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.724056005 CEST	49871	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.724071026 CEST	443	49871	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.724081039 CEST	49871	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.724086046 CEST	443	49871	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.727004051 CEST	49876	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.727032900 CEST	443	49876	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.727157116 CEST	49876	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.727343082 CEST	49876	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.727356911 CEST	443	49876	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.728074074 CEST	443	49872	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.728307962 CEST	443	49872	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.728364944 CEST	49872	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.728391886 CEST	49872	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.728403091 CEST	443	49872	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.730571985 CEST	49877	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.730592966 CEST	443	49877	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.730699062 CEST	49877	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.730865955 CEST	49877	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.730878115 CEST	443	49877	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.735505104 CEST	443	49875	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.735891104 CEST	49875	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.735933065 CEST	443	49875	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.736340046 CEST	49875	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.736352921 CEST	443	49875	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.745357037 CEST	443	49873	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.745616913 CEST	443	49873	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.745671034 CEST	49873	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.745672941 CEST	443	49873	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.745728016 CEST	49873	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.745774031 CEST	49873	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.745774031 CEST	49873	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.745803118 CEST	443	49873	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.745831013 CEST	443	49873	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.747921944 CEST	49878	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.747963905 CEST	443	49878	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.748085976 CEST	49878	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.748184919 CEST	49878	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.748202085 CEST	443	49878	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.859026909 CEST	443	49874	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.859072924 CEST	443	49874	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.859141111 CEST	49874	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.859613895 CEST	49874	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.859625101 CEST	443	49874	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.859633923 CEST	49874	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.859637976 CEST	443	49874	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.862983942 CEST	49879	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.862999916 CEST	443	49879	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.863063097 CEST	49879	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.863266945 CEST	49879	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.863275051 CEST	443	49879	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.889040947 CEST	443	49875	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.890314102 CEST	443	49875	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.890364885 CEST	49875	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.890682936 CEST	49875	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.890703917 CEST	443	49875	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.890713930 CEST	49875	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.890718937 CEST	443	49875	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.893755913 CEST	49880	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.893784046 CEST	443	49880	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:19.894028902 CEST	49880	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.894145966 CEST	49880	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:19.894165039 CEST	443	49880	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.473289967 CEST	443	49876	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.473851919 CEST	49876	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.473879099 CEST	443	49876	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.474487066 CEST	49876	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.474494934 CEST	443	49876	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.496243954 CEST	443	49877	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.496766090 CEST	49877	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.496783018 CEST	443	49877	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.497225046 CEST	49877	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.497231007 CEST	443	49877	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.517162085 CEST	443	49878	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.517594099 CEST	49878	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.517618895 CEST	443	49878	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.518088102 CEST	49878	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.518094063 CEST	443	49878	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.608223915 CEST	443	49876	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.608408928 CEST	443	49876	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.608716011 CEST	49876	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.608866930 CEST	49876	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.608885050 CEST	443	49876	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.608916998 CEST	49876	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.608922958 CEST	443	49876	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.626997948 CEST	443	49879	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.630707979 CEST	49879	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.630754948 CEST	443	49879	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.631201982 CEST	49879	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.631211996 CEST	443	49879	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.633125067 CEST	49881	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.633166075 CEST	443	49881	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.633378029 CEST	49881	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.633531094 CEST	49881	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.633538961 CEST	443	49881	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.634665966 CEST	443	49877	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.634692907 CEST	443	49877	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.634733915 CEST	443	49877	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.634747028 CEST	49877	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.634788990 CEST	49877	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.635139942 CEST	49877	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.635159016 CEST	443	49877	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.635179043 CEST	49877	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.635188103 CEST	443	49877	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.638046026 CEST	49882	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.638084888 CEST	443	49882	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.638180017 CEST	49882	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.638394117 CEST	49882	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.638406992 CEST	443	49882	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.645840883 CEST	443	49880	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.646205902 CEST	49880	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.646233082 CEST	443	49880	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.646774054 CEST	49880	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.646779060 CEST	443	49880	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.654630899 CEST	443	49878	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.654694080 CEST	443	49878	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.654752016 CEST	49878	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.654906034 CEST	49878	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.654917955 CEST	443	49878	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.654927015 CEST	49878	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.654932022 CEST	443	49878	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.658049107 CEST	49883	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.658082962 CEST	443	49883	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.658143044 CEST	49883	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.658252954 CEST	49883	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.658262968 CEST	443	49883	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.763712883 CEST	443	49879	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.763736963 CEST	443	49879	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.763787985 CEST	443	49879	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.763803959 CEST	49879	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.763856888 CEST	49879	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.764276981 CEST	49879	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.764276981 CEST	49879	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.764343977 CEST	443	49879	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.764379978 CEST	443	49879	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.767421007 CEST	49884	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.767462015 CEST	443	49884	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.767586946 CEST	49884	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.767740965 CEST	49884	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.767755985 CEST	443	49884	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.783370018 CEST	443	49880	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.783549070 CEST	443	49880	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.783638954 CEST	49880	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.783674955 CEST	49880	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.783674955 CEST	49880	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.783688068 CEST	443	49880	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.783696890 CEST	443	49880	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.786338091 CEST	49885	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.786391020 CEST	443	49885	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:20.786494017 CEST	49885	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.786623001 CEST	49885	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:20.786642075 CEST	443	49885	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.391345978 CEST	443	49881	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.392102957 CEST	49881	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.392123938 CEST	443	49881	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.392633915 CEST	49881	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.392640114 CEST	443	49881	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.394584894 CEST	443	49882	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.394958973 CEST	49882	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.394984007 CEST	443	49882	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.395294905 CEST	49882	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.395299911 CEST	443	49882	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.424776077 CEST	443	49883	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.425209999 CEST	49883	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.425223112 CEST	443	49883	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.425695896 CEST	49883	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.425703049 CEST	443	49883	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.527625084 CEST	443	49881	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.528712988 CEST	443	49881	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.528783083 CEST	49881	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.528862000 CEST	49881	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.528881073 CEST	443	49881	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.528897047 CEST	49881	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.528903961 CEST	443	49881	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.531939983 CEST	443	49882	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.532040119 CEST	443	49882	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.532146931 CEST	49882	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.532740116 CEST	49886	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.532768011 CEST	443	49886	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.532924891 CEST	49886	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.533087969 CEST	49882	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.533087969 CEST	49882	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.533109903 CEST	443	49882	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.533118963 CEST	443	49882	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.533251047 CEST	49886	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.533265114 CEST	443	49886	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.535685062 CEST	49887	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.535731077 CEST	443	49887	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.535845995 CEST	49887	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.536109924 CEST	49887	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.536130905 CEST	443	49887	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.541892052 CEST	443	49884	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.542294979 CEST	49884	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.542304039 CEST	443	49884	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.542751074 CEST	49884	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.542754889 CEST	443	49884	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.554449081 CEST	443	49885	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.554897070 CEST	49885	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.554907084 CEST	443	49885	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.555337906 CEST	49885	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.555352926 CEST	443	49885	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.563666105 CEST	443	49883	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.564088106 CEST	443	49883	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.564132929 CEST	49883	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.564141989 CEST	443	49883	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.564165115 CEST	443	49883	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.564210892 CEST	49883	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.564280987 CEST	49883	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.564292908 CEST	443	49883	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.564304113 CEST	49883	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.564310074 CEST	443	49883	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.566303968 CEST	49888	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.566324949 CEST	443	49888	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.566414118 CEST	49888	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.566510916 CEST	49888	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.566521883 CEST	443	49888	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.683208942 CEST	443	49884	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.683250904 CEST	443	49884	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.683526039 CEST	49884	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.683609009 CEST	49884	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.683609009 CEST	49884	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.683619976 CEST	443	49884	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.683629036 CEST	443	49884	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.686889887 CEST	49889	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.686955929 CEST	443	49889	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.687161922 CEST	49889	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.687366962 CEST	49889	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.687400103 CEST	443	49889	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.696738958 CEST	443	49885	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.696814060 CEST	443	49885	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.696928024 CEST	443	49885	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.696958065 CEST	49885	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.697022915 CEST	49885	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.697022915 CEST	49885	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.697022915 CEST	49885	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.697047949 CEST	443	49885	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.699446917 CEST	49890	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.699462891 CEST	443	49890	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.699615955 CEST	49890	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.699754000 CEST	49890	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.699764013 CEST	443	49890	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:21.999676943 CEST	49885	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:21.999707937 CEST	443	49885	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.281862020 CEST	443	49887	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.282499075 CEST	49887	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.282520056 CEST	443	49887	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.283255100 CEST	49887	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.283263922 CEST	443	49887	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.294449091 CEST	443	49886	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.294965982 CEST	49886	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.294994116 CEST	443	49886	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.295634985 CEST	49886	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.295643091 CEST	443	49886	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.320631981 CEST	443	49888	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.321115017 CEST	49888	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.321135998 CEST	443	49888	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.321567059 CEST	49888	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.321573019 CEST	443	49888	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.417057037 CEST	443	49887	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.417114973 CEST	443	49887	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.417419910 CEST	49887	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.417534113 CEST	49887	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.417534113 CEST	49887	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.417557955 CEST	443	49887	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.417571068 CEST	443	49887	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.421173096 CEST	49891	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.421209097 CEST	443	49891	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.421327114 CEST	49891	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.421736002 CEST	49891	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.421751022 CEST	443	49891	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.431646109 CEST	443	49889	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.432173014 CEST	49889	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.432194948 CEST	443	49889	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.432638884 CEST	49889	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.432657003 CEST	443	49889	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.434106112 CEST	443	49886	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.434174061 CEST	443	49886	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.435579062 CEST	49886	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.435579062 CEST	49886	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.435579062 CEST	49886	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.436911106 CEST	49892	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.436939001 CEST	443	49892	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.437030077 CEST	49892	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.437288046 CEST	49892	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.437300920 CEST	443	49892	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.461596966 CEST	443	49888	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.461668968 CEST	443	49888	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.461726904 CEST	49888	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.461957932 CEST	49888	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.461971998 CEST	443	49888	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.461982012 CEST	49888	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.461987972 CEST	443	49888	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.465303898 CEST	49893	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.465379953 CEST	443	49893	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.465467930 CEST	49893	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.465656042 CEST	49893	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.465698957 CEST	443	49893	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.470005035 CEST	443	49890	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.470455885 CEST	49890	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.470464945 CEST	443	49890	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.470921993 CEST	49890	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.470927000 CEST	443	49890	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.568165064 CEST	443	49889	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.568237066 CEST	443	49889	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.568327904 CEST	49889	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.568579912 CEST	49889	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.568627119 CEST	443	49889	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.568670034 CEST	49889	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.568686962 CEST	443	49889	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.572376013 CEST	49894	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.572400093 CEST	443	49894	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.572474003 CEST	49894	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.572695017 CEST	49894	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.572701931 CEST	443	49894	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.607481003 CEST	443	49890	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.607686043 CEST	443	49890	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.607769966 CEST	49890	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.607898951 CEST	49890	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.607918024 CEST	443	49890	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.607929945 CEST	49890	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.607934952 CEST	443	49890	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.612312078 CEST	49895	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.612345934 CEST	443	49895	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.612493992 CEST	49895	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.612709045 CEST	49895	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.612726927 CEST	443	49895	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:22.734023094 CEST	49886	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:22.734041929 CEST	443	49886	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.173701048 CEST	443	49891	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.175021887 CEST	49891	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.175055027 CEST	443	49891	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.176314116 CEST	49891	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.176323891 CEST	443	49891	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.208240032 CEST	443	49892	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.209042072 CEST	49892	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.209064960 CEST	443	49892	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.209964037 CEST	49892	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.209969044 CEST	443	49892	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.220283031 CEST	443	49893	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.220885038 CEST	49893	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.221016884 CEST	443	49893	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.221829891 CEST	49893	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.221848965 CEST	443	49893	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.311235905 CEST	443	49891	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.311522961 CEST	443	49891	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.311613083 CEST	49891	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.313394070 CEST	49891	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.313394070 CEST	49891	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.313430071 CEST	443	49891	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.313443899 CEST	443	49891	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.325577021 CEST	443	49894	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.349960089 CEST	443	49892	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.350018978 CEST	443	49892	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.350239992 CEST	49892	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.357412100 CEST	443	49893	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.357441902 CEST	443	49893	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.357497931 CEST	443	49893	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.357507944 CEST	49893	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.357542038 CEST	49893	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.361624956 CEST	49893	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.361654997 CEST	443	49893	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.361695051 CEST	49893	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.361709118 CEST	443	49893	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.374558926 CEST	49894	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.408035994 CEST	443	49895	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.426671982 CEST	49894	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.426682949 CEST	443	49894	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.428309917 CEST	49894	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.428316116 CEST	443	49894	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.436353922 CEST	49892	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.436372042 CEST	443	49892	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.439552069 CEST	49895	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.439634085 CEST	443	49895	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.441046953 CEST	49895	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.441068888 CEST	443	49895	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.445750952 CEST	49896	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.445782900 CEST	443	49896	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.445873022 CEST	49896	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.446027040 CEST	49896	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.446039915 CEST	443	49896	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.449600935 CEST	49897	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.449655056 CEST	443	49897	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.449857950 CEST	49897	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.451558113 CEST	49898	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.451571941 CEST	443	49898	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.451631069 CEST	49898	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.451870918 CEST	49898	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.451881886 CEST	443	49898	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.452414036 CEST	49897	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.452435017 CEST	443	49897	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.560497046 CEST	443	49894	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.560549974 CEST	443	49894	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.560659885 CEST	49894	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.561222076 CEST	49894	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.561234951 CEST	443	49894	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.561244965 CEST	49894	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.561250925 CEST	443	49894	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.566078901 CEST	49899	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.566127062 CEST	443	49899	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.566343069 CEST	49899	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.566742897 CEST	49899	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.566761971 CEST	443	49899	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.575994015 CEST	443	49895	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.576795101 CEST	443	49895	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.576872110 CEST	49895	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.576980114 CEST	49895	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.577004910 CEST	443	49895	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.577038050 CEST	49895	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.577054024 CEST	443	49895	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.581485987 CEST	49900	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.581513882 CEST	443	49900	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:23.581597090 CEST	49900	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.581998110 CEST	49900	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:23.582011938 CEST	443	49900	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.193037033 CEST	443	49896	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.193557978 CEST	49896	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.193569899 CEST	443	49896	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.195671082 CEST	49896	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.195678949 CEST	443	49896	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.215483904 CEST	443	49898	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.216123104 CEST	49898	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.216140985 CEST	443	49898	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.216785908 CEST	49898	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.216799974 CEST	443	49898	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.298898935 CEST	443	49897	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.299526930 CEST	49897	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.299556971 CEST	443	49897	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.300029039 CEST	49897	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.300039053 CEST	443	49897	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.321274042 CEST	443	49899	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.321759939 CEST	49899	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.321782112 CEST	443	49899	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.322302103 CEST	49899	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.322310925 CEST	443	49899	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.328421116 CEST	443	49896	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.328680992 CEST	443	49896	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.328804970 CEST	49896	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.328927040 CEST	49896	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.328927040 CEST	49896	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.328942060 CEST	443	49896	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.328949928 CEST	443	49896	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.336517096 CEST	49901	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.336563110 CEST	443	49901	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.336827993 CEST	49901	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.336956978 CEST	49901	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.336971998 CEST	443	49901	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.355778933 CEST	443	49900	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.356256008 CEST	49900	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.356280088 CEST	443	49900	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.356731892 CEST	49900	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.356738091 CEST	443	49900	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.356760025 CEST	443	49898	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.356786966 CEST	443	49898	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.356853008 CEST	443	49898	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.356913090 CEST	49898	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.356913090 CEST	49898	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.357131004 CEST	49898	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.357131004 CEST	49898	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.357142925 CEST	443	49898	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.357151031 CEST	443	49898	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.359970093 CEST	49902	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.359989882 CEST	443	49902	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.360105038 CEST	49902	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.360234976 CEST	49902	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.360246897 CEST	443	49902	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.459666014 CEST	443	49899	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.459695101 CEST	443	49899	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.459743023 CEST	443	49899	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.459743977 CEST	49899	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.459800005 CEST	49899	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.460136890 CEST	49899	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.460158110 CEST	443	49899	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.460171938 CEST	49899	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.460180998 CEST	443	49899	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.463335991 CEST	49903	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.463371992 CEST	443	49903	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.463530064 CEST	49903	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.463737011 CEST	49903	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.463757038 CEST	443	49903	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.487510920 CEST	443	49897	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.487582922 CEST	443	49897	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.487643957 CEST	49897	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.487656116 CEST	443	49897	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.487705946 CEST	443	49897	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.487761021 CEST	49897	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.487850904 CEST	49897	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.487862110 CEST	443	49897	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.487873077 CEST	49897	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.487878084 CEST	443	49897	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.490549088 CEST	49904	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.490575075 CEST	443	49904	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.490643978 CEST	49904	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.490794897 CEST	49904	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.490811110 CEST	443	49904	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.493438005 CEST	443	49900	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.493603945 CEST	443	49900	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.493830919 CEST	49900	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.493868113 CEST	49900	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.493868113 CEST	49900	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.493887901 CEST	443	49900	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.493897915 CEST	443	49900	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.495975018 CEST	49905	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.496002913 CEST	443	49905	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:24.496134996 CEST	49905	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.496265888 CEST	49905	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:24.496279001 CEST	443	49905	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.092534065 CEST	443	49901	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.093205929 CEST	49901	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:25.093218088 CEST	443	49901	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.094141006 CEST	49901	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:25.094146013 CEST	443	49901	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.129441977 CEST	443	49902	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.130172014 CEST	49902	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:25.130212069 CEST	443	49902	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.131014109 CEST	49902	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:25.131021976 CEST	443	49902	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.219858885 CEST	443	49903	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.220623970 CEST	49903	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:25.220640898 CEST	443	49903	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.221373081 CEST	49903	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:25.221379995 CEST	443	49903	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.230855942 CEST	443	49901	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.230890036 CEST	443	49901	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.230936050 CEST	443	49901	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.230983973 CEST	49901	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:25.230983973 CEST	49901	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:25.231580973 CEST	49901	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:25.231580973 CEST	49901	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:25.231596947 CEST	443	49901	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.231605053 CEST	443	49901	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.235555887 CEST	49906	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:25.235593081 CEST	443	49906	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.235754013 CEST	49906	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:25.236038923 CEST	49906	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:25.236063957 CEST	443	49906	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.265321970 CEST	443	49904	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.266196012 CEST	49904	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:25.266212940 CEST	443	49904	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.266895056 CEST	443	49902	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.266951084 CEST	443	49902	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.266983032 CEST	49904	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:25.266988039 CEST	443	49904	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.266999960 CEST	49902	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:25.267335892 CEST	49902	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:25.267355919 CEST	443	49902	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.267366886 CEST	49902	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:25.267374039 CEST	443	49902	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.272661924 CEST	49907	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:25.272692919 CEST	443	49907	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.272804976 CEST	49907	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:25.273065090 CEST	49907	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:25.273081064 CEST	443	49907	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.356867075 CEST	443	49903	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.356897116 CEST	443	49903	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.356961966 CEST	443	49903	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.357002974 CEST	49903	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:25.357022047 CEST	49903	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:25.368498087 CEST	49903	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:25.368526936 CEST	443	49903	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.374411106 CEST	49908	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:25.374449015 CEST	443	49908	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.374732971 CEST	49908	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:25.375036001 CEST	49908	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:25.375066996 CEST	443	49908	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.405774117 CEST	443	49904	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.406447887 CEST	443	49904	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.406495094 CEST	443	49904	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.406512976 CEST	49904	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:25.406594038 CEST	49904	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:25.406725883 CEST	49904	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:25.406750917 CEST	443	49904	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.406783104 CEST	49904	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:25.406789064 CEST	443	49904	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.413173914 CEST	49909	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:25.413207054 CEST	443	49909	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:25.413305998 CEST	49909	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:25.413773060 CEST	49909	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:25.413785934 CEST	443	49909	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.011594057 CEST	443	49906	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.012329102 CEST	49906	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.012351990 CEST	443	49906	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.013154984 CEST	49906	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.013159990 CEST	443	49906	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.032493114 CEST	443	49907	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.068964005 CEST	49907	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.068974972 CEST	443	49907	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.069766998 CEST	49907	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.069773912 CEST	443	49907	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.134212971 CEST	443	49908	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.148186922 CEST	49908	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.148195982 CEST	443	49908	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.149506092 CEST	49908	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.149511099 CEST	443	49908	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.150305986 CEST	443	49906	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.150537014 CEST	443	49906	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.150585890 CEST	49906	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.153590918 CEST	49906	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.153604031 CEST	443	49906	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.153639078 CEST	49906	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.153645992 CEST	443	49906	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.167052984 CEST	49910	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.167072058 CEST	443	49910	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.167185068 CEST	49910	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.167907000 CEST	49910	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.167920113 CEST	443	49910	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.184468031 CEST	443	49909	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.197122097 CEST	49909	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.197140932 CEST	443	49909	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.200639009 CEST	49909	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.200644016 CEST	443	49909	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.201188087 CEST	443	49907	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.201252937 CEST	443	49907	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.201422930 CEST	49907	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.203392982 CEST	49907	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.203409910 CEST	443	49907	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.203521013 CEST	49907	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.203527927 CEST	443	49907	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.211829901 CEST	49911	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.211858034 CEST	443	49911	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.211926937 CEST	49911	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.212692022 CEST	49911	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.212703943 CEST	443	49911	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.219196081 CEST	49912	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:26.219222069 CEST	443	49912	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:26.219291925 CEST	49912	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:26.220053911 CEST	49912	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:26.220072031 CEST	443	49912	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:26.257653952 CEST	49913	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:26.257674932 CEST	443	49913	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:26.257901907 CEST	49913	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:26.258439064 CEST	49913	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:26.258450031 CEST	443	49913	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:26.275979996 CEST	443	49905	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.279262066 CEST	49905	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.279268980 CEST	443	49905	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.279762030 CEST	49905	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.279771090 CEST	443	49905	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.287348032 CEST	443	49908	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.287420988 CEST	443	49908	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.287659883 CEST	49908	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.289061069 CEST	49908	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.289083958 CEST	443	49908	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.296755075 CEST	49914	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.296794891 CEST	443	49914	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.296906948 CEST	49914	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.298105955 CEST	49914	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.298119068 CEST	443	49914	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.335633993 CEST	443	49909	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.335783958 CEST	443	49909	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.335828066 CEST	443	49909	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.335850954 CEST	49909	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.335899115 CEST	49909	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.336721897 CEST	49909	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.336740971 CEST	443	49909	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.336771011 CEST	49909	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.336776972 CEST	443	49909	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.348516941 CEST	49915	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.348557949 CEST	443	49915	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.348681927 CEST	49915	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.350183964 CEST	49915	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.350204945 CEST	443	49915	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.420036077 CEST	443	49905	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.420106888 CEST	443	49905	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.420216084 CEST	443	49905	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.420255899 CEST	49905	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.420273066 CEST	49905	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.421458006 CEST	49905	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.421458006 CEST	49905	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.421468973 CEST	443	49905	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.421477079 CEST	443	49905	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.427508116 CEST	49916	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.427573919 CEST	443	49916	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.427691936 CEST	49916	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.428739071 CEST	49916	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.428760052 CEST	443	49916	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.928306103 CEST	443	49910	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.931189060 CEST	49910	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.931214094 CEST	443	49910	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.932177067 CEST	49910	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.932207108 CEST	443	49910	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.961576939 CEST	443	49911	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.962587118 CEST	49911	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.962599039 CEST	443	49911	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:26.963861942 CEST	49911	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:26.963867903 CEST	443	49911	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.053352118 CEST	443	49914	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.054069996 CEST	49914	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.054131031 CEST	443	49914	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.054603100 CEST	49914	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.054617882 CEST	443	49914	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.069063902 CEST	443	49910	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.069540977 CEST	443	49910	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.069645882 CEST	49910	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.070972919 CEST	49910	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.071000099 CEST	443	49910	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.071018934 CEST	49910	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.071028948 CEST	443	49910	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.074117899 CEST	49917	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.074146986 CEST	443	49917	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.074253082 CEST	49917	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.074395895 CEST	49917	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.074402094 CEST	443	49917	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.098473072 CEST	443	49911	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.098516941 CEST	443	49911	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.098566055 CEST	443	49911	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.098572016 CEST	49911	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.098618031 CEST	49911	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.098866940 CEST	49911	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.098881960 CEST	443	49911	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.098903894 CEST	49911	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.098908901 CEST	443	49911	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.102065086 CEST	49918	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.102118969 CEST	443	49918	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.102191925 CEST	49918	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.102356911 CEST	49918	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.102389097 CEST	443	49918	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.131123066 CEST	443	49915	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.131696939 CEST	49915	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.131724119 CEST	443	49915	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.132282019 CEST	49915	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.132288933 CEST	443	49915	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.180041075 CEST	443	49916	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.180604935 CEST	49916	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.180633068 CEST	443	49916	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.181117058 CEST	49916	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.181128979 CEST	443	49916	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.192163944 CEST	443	49914	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.192226887 CEST	443	49914	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.192296028 CEST	49914	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.192492962 CEST	49914	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.192519903 CEST	443	49914	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.192533970 CEST	49914	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.192540884 CEST	443	49914	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.195503950 CEST	49919	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.195537090 CEST	443	49919	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.195652008 CEST	49919	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.195830107 CEST	49919	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.195837021 CEST	443	49919	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.271954060 CEST	443	49915	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.271995068 CEST	443	49915	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.272042990 CEST	443	49915	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.272103071 CEST	49915	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.272349119 CEST	49915	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.272373915 CEST	443	49915	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.272387981 CEST	49915	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.272396088 CEST	443	49915	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.275356054 CEST	49920	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.275403023 CEST	443	49920	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.275609016 CEST	49920	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.275747061 CEST	49920	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.275762081 CEST	443	49920	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.318341970 CEST	443	49916	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.318506002 CEST	443	49916	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.318588018 CEST	49916	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.318700075 CEST	49916	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.318732977 CEST	443	49916	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.318785906 CEST	49916	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.318800926 CEST	443	49916	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.321943045 CEST	49921	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.321974039 CEST	443	49921	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.322240114 CEST	49921	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.322437048 CEST	49921	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.322448015 CEST	443	49921	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.338212013 CEST	443	49912	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:27.338291883 CEST	49912	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:27.340254068 CEST	49912	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:27.340264082 CEST	443	49912	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:27.340531111 CEST	443	49912	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:27.341943026 CEST	49912	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:27.342031956 CEST	49912	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:27.342037916 CEST	443	49912	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:27.342138052 CEST	49912	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:27.383333921 CEST	443	49912	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:27.390290976 CEST	443	49913	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:27.390388012 CEST	49913	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:27.392956018 CEST	49913	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:27.392966032 CEST	443	49913	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:27.393279076 CEST	443	49913	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:27.396231890 CEST	49913	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:27.396259069 CEST	49913	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:27.396264076 CEST	443	49913	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:27.396435976 CEST	49913	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:27.443339109 CEST	443	49913	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:27.593066931 CEST	443	49912	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:27.593602896 CEST	49912	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:27.593616962 CEST	443	49912	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:27.593652010 CEST	49912	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:27.593681097 CEST	49912	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:27.646734953 CEST	443	49913	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:27.647305012 CEST	49913	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:27.647305012 CEST	49913	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:27.647320986 CEST	443	49913	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:27.647388935 CEST	49913	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:27.824107885 CEST	443	49917	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.824700117 CEST	49917	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.824711084 CEST	443	49917	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.825222015 CEST	49917	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.825227022 CEST	443	49917	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.881582975 CEST	443	49918	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.882164955 CEST	49918	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.882203102 CEST	443	49918	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.882671118 CEST	49918	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.882683039 CEST	443	49918	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.943444014 CEST	443	49919	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.943948030 CEST	49919	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.943963051 CEST	443	49919	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.944432974 CEST	49919	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.944438934 CEST	443	49919	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.961411953 CEST	443	49917	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.961486101 CEST	443	49917	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.961584091 CEST	49917	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.961693048 CEST	49917	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.961713076 CEST	443	49917	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.961734056 CEST	49917	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.961740017 CEST	443	49917	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.964449883 CEST	49922	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.964483976 CEST	443	49922	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:27.964582920 CEST	49922	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.964735031 CEST	49922	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:27.964752913 CEST	443	49922	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.021796942 CEST	443	49918	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.021856070 CEST	443	49918	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.021927118 CEST	49918	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.022232056 CEST	49918	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.022232056 CEST	49918	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.022262096 CEST	443	49918	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.022286892 CEST	443	49918	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.025084972 CEST	49923	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.025110960 CEST	443	49923	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.025369883 CEST	49923	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.025521040 CEST	49923	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.025540113 CEST	443	49923	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.039309025 CEST	443	49920	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.039756060 CEST	49920	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.039767981 CEST	443	49920	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.040189981 CEST	49920	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.040195942 CEST	443	49920	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.081633091 CEST	443	49919	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.081877947 CEST	443	49919	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.081971884 CEST	49919	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.082078934 CEST	49919	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.082089901 CEST	443	49919	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.082101107 CEST	49919	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.082104921 CEST	443	49919	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.086383104 CEST	49924	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.086433887 CEST	443	49924	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.086639881 CEST	49924	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.086776018 CEST	49924	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.086796045 CEST	443	49924	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.099240065 CEST	443	49921	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.102000952 CEST	49921	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.102009058 CEST	443	49921	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.102617979 CEST	49921	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.102622986 CEST	443	49921	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.104144096 CEST	80	49708	217.20.57.21	192.168.2.5
Oct 24, 2024 18:16:28.104366064 CEST	49708	80	192.168.2.5	217.20.57.21
Oct 24, 2024 18:16:28.104422092 CEST	49708	80	192.168.2.5	217.20.57.21
Oct 24, 2024 18:16:28.109812021 CEST	80	49708	217.20.57.21	192.168.2.5
Oct 24, 2024 18:16:28.177990913 CEST	443	49920	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.178069115 CEST	443	49920	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.178288937 CEST	49920	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.178338051 CEST	49920	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.178359032 CEST	443	49920	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.178371906 CEST	49920	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.178376913 CEST	443	49920	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.181426048 CEST	49925	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.181464911 CEST	443	49925	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.181539059 CEST	49925	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.181674004 CEST	49925	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.181684017 CEST	443	49925	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.238939047 CEST	443	49921	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.239000082 CEST	443	49921	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.239125967 CEST	49921	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.239144087 CEST	443	49921	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.239161015 CEST	443	49921	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.239212990 CEST	49921	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.239371061 CEST	49921	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.239386082 CEST	443	49921	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.239394903 CEST	49921	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.239399910 CEST	443	49921	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.242600918 CEST	49926	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.242641926 CEST	443	49926	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.242741108 CEST	49926	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.242942095 CEST	49926	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.242970943 CEST	443	49926	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.728391886 CEST	443	49922	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.729007959 CEST	49922	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.729024887 CEST	443	49922	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.729599953 CEST	49922	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.729605913 CEST	443	49922	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.777802944 CEST	443	49923	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.778327942 CEST	49923	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.778341055 CEST	443	49923	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.779036045 CEST	49923	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.779042006 CEST	443	49923	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.843923092 CEST	443	49924	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.844568968 CEST	49924	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.844583988 CEST	443	49924	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.845118046 CEST	49924	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.845124006 CEST	443	49924	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.870662928 CEST	443	49922	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.870723009 CEST	443	49922	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.870950937 CEST	49922	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.871004105 CEST	49922	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.871020079 CEST	443	49922	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.871030092 CEST	49922	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.871035099 CEST	443	49922	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.874047041 CEST	49927	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.874072075 CEST	443	49927	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.874186993 CEST	49927	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.874366999 CEST	49927	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.874371052 CEST	443	49927	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.914669037 CEST	443	49923	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.914700031 CEST	443	49923	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.914746046 CEST	443	49923	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.914747953 CEST	49923	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.914793968 CEST	49923	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.915060997 CEST	49923	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.915080070 CEST	443	49923	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.915091991 CEST	49923	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.915096998 CEST	443	49923	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.918319941 CEST	49928	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.918416977 CEST	443	49928	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.918589115 CEST	49928	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.918844938 CEST	49928	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.918881893 CEST	443	49928	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.935596943 CEST	443	49925	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.936125994 CEST	49925	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.936148882 CEST	443	49925	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.936613083 CEST	49925	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.936619043 CEST	443	49925	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.983558893 CEST	443	49924	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.983623028 CEST	443	49924	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.983685970 CEST	49924	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.984180927 CEST	49924	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.984180927 CEST	49924	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.984201908 CEST	443	49924	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.984211922 CEST	443	49924	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.987721920 CEST	49929	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.987765074 CEST	443	49929	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:28.987857103 CEST	49929	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.988075972 CEST	49929	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:28.988087893 CEST	443	49929	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.018999100 CEST	443	49926	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.019582987 CEST	49926	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.019601107 CEST	443	49926	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.020140886 CEST	49926	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.020148039 CEST	443	49926	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.072551012 CEST	443	49925	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.072588921 CEST	443	49925	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.072635889 CEST	443	49925	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.072695971 CEST	49925	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.072956085 CEST	49925	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.072977066 CEST	443	49925	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.072993040 CEST	49925	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.073000908 CEST	443	49925	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.076142073 CEST	49930	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.076220989 CEST	443	49930	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.076358080 CEST	49930	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.076529026 CEST	49930	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.076565027 CEST	443	49930	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.156030893 CEST	443	49926	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.156213045 CEST	443	49926	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.156276941 CEST	49926	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.156447887 CEST	49926	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.156447887 CEST	49926	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.156471014 CEST	443	49926	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.156480074 CEST	443	49926	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.159641027 CEST	49931	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.159678936 CEST	443	49931	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.159908056 CEST	49931	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.159908056 CEST	49931	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.159940004 CEST	443	49931	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.653928995 CEST	443	49927	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.654547930 CEST	49927	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.654556990 CEST	443	49927	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.655076981 CEST	49927	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.655081034 CEST	443	49927	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.671386003 CEST	443	49928	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.672275066 CEST	49928	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.672312021 CEST	443	49928	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.672985077 CEST	49928	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.673006058 CEST	443	49928	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.761219025 CEST	443	49929	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.761858940 CEST	49929	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.761888981 CEST	443	49929	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.762773037 CEST	49929	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.762778997 CEST	443	49929	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.798181057 CEST	443	49927	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.798222065 CEST	443	49927	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.798281908 CEST	443	49927	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.798280954 CEST	49927	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.798336029 CEST	49927	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.798609972 CEST	49927	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.798625946 CEST	443	49927	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.798635960 CEST	49927	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.798640966 CEST	443	49927	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.802443981 CEST	49932	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.802476883 CEST	443	49932	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.802546978 CEST	49932	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.802736044 CEST	49932	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.802748919 CEST	443	49932	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.808943987 CEST	443	49928	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.809007883 CEST	443	49928	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.809066057 CEST	49928	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.809264898 CEST	49928	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.809288025 CEST	443	49928	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.809302092 CEST	49928	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.809309006 CEST	443	49928	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.812385082 CEST	49933	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.812410116 CEST	443	49933	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.812513113 CEST	49933	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.812836885 CEST	49933	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.812850952 CEST	443	49933	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.828886986 CEST	443	49930	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.829593897 CEST	49930	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.829634905 CEST	443	49930	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.830693960 CEST	49930	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.830708981 CEST	443	49930	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.898340940 CEST	443	49929	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.898374081 CEST	443	49929	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.898432016 CEST	49929	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.898441076 CEST	443	49929	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.898536921 CEST	443	49929	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.898605108 CEST	49929	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.898777008 CEST	49929	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.898788929 CEST	443	49929	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.898823023 CEST	49929	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.898828030 CEST	443	49929	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.902281046 CEST	49934	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.902299881 CEST	443	49934	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.902379036 CEST	49934	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.902569056 CEST	49934	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.902580023 CEST	443	49934	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.925893068 CEST	443	49931	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.926503897 CEST	49931	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.926517963 CEST	443	49931	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.927145004 CEST	49931	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.927150011 CEST	443	49931	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.966120958 CEST	443	49930	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.966141939 CEST	443	49930	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.966208935 CEST	443	49930	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.966206074 CEST	49930	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.966290951 CEST	49930	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.966527939 CEST	49930	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.966528893 CEST	49930	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.966568947 CEST	443	49930	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.966594934 CEST	443	49930	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.970046043 CEST	49935	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.970083952 CEST	443	49935	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:29.970177889 CEST	49935	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.970406055 CEST	49935	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:29.970416069 CEST	443	49935	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.065548897 CEST	443	49931	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.065591097 CEST	443	49931	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.065642118 CEST	49931	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.065656900 CEST	443	49931	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.065804958 CEST	49931	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.065990925 CEST	49931	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.066003084 CEST	443	49931	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.066018105 CEST	49931	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.066024065 CEST	443	49931	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.069629908 CEST	49936	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.069647074 CEST	443	49936	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.069716930 CEST	49936	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.069900036 CEST	49936	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.069907904 CEST	443	49936	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.653043985 CEST	443	49934	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.654215097 CEST	443	49933	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.654324055 CEST	49934	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.654346943 CEST	443	49934	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.654679060 CEST	443	49932	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.655796051 CEST	49934	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.655802965 CEST	443	49934	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.656949043 CEST	49933	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.656971931 CEST	443	49933	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.658113003 CEST	49933	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.658118010 CEST	443	49933	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.658874035 CEST	49932	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.658888102 CEST	443	49932	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.660023928 CEST	49932	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.660027981 CEST	443	49932	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.738949060 CEST	443	49935	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.739984989 CEST	49935	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.740010023 CEST	443	49935	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.740942955 CEST	49935	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.740947962 CEST	443	49935	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.787558079 CEST	443	49934	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.787620068 CEST	443	49934	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.787692070 CEST	49934	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.792011976 CEST	443	49932	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.792093039 CEST	443	49932	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.792136908 CEST	49932	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.792553902 CEST	443	49933	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.792606115 CEST	443	49933	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.792654037 CEST	443	49933	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.792666912 CEST	49933	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.792701006 CEST	49933	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.795559883 CEST	49934	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.795578003 CEST	443	49934	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.798477888 CEST	49932	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.798485041 CEST	443	49932	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.798522949 CEST	49932	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.798527956 CEST	443	49932	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.799232006 CEST	49933	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.799241066 CEST	443	49933	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.799252987 CEST	49933	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.799257994 CEST	443	49933	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.813397884 CEST	443	49936	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.859754086 CEST	49936	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.872859955 CEST	49936	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.872869015 CEST	443	49936	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.873467922 CEST	49936	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.873472929 CEST	443	49936	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.881563902 CEST	443	49935	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.882179022 CEST	443	49935	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.882221937 CEST	443	49935	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.882236004 CEST	49935	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.882285118 CEST	49935	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.891887903 CEST	49935	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.891911030 CEST	443	49935	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.891925097 CEST	49935	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.891932964 CEST	443	49935	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.929341078 CEST	49937	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.929449081 CEST	443	49937	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.929569006 CEST	49937	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.935693026 CEST	49938	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.935724020 CEST	443	49938	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.935787916 CEST	49938	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.940987110 CEST	49939	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.941015005 CEST	443	49939	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.941082954 CEST	49939	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.941859007 CEST	49937	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.941896915 CEST	443	49937	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.942298889 CEST	49938	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.942312956 CEST	443	49938	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.943809032 CEST	49939	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.943840981 CEST	443	49939	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.959404945 CEST	49940	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.959431887 CEST	443	49940	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:30.959495068 CEST	49940	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.959767103 CEST	49940	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:30.959780931 CEST	443	49940	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.006979942 CEST	443	49936	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.007213116 CEST	443	49936	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.007272959 CEST	49936	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.013871908 CEST	49936	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.013895988 CEST	443	49936	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.040649891 CEST	49941	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.040688992 CEST	443	49941	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.040775061 CEST	49941	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.041239977 CEST	49941	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.041251898 CEST	443	49941	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.685703039 CEST	443	49937	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.686362982 CEST	49937	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.686446905 CEST	443	49937	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.686853886 CEST	49937	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.686871052 CEST	443	49937	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.695349932 CEST	443	49939	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.695794106 CEST	49939	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.695812941 CEST	443	49939	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.696207047 CEST	49939	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.696218014 CEST	443	49939	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.709538937 CEST	443	49938	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.709978104 CEST	49938	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.710004091 CEST	443	49938	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.710489988 CEST	49938	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.710495949 CEST	443	49938	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.716330051 CEST	443	49940	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.716725111 CEST	49940	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.716742992 CEST	443	49940	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.717147112 CEST	49940	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.717152119 CEST	443	49940	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.800954103 CEST	443	49941	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.801546097 CEST	49941	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.801562071 CEST	443	49941	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.802120924 CEST	49941	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.802126884 CEST	443	49941	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.819892883 CEST	443	49937	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.819964886 CEST	443	49937	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.820077896 CEST	443	49937	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.820158958 CEST	49937	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.820281029 CEST	49937	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.820281029 CEST	49937	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.820334911 CEST	443	49937	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.820369005 CEST	443	49937	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.823525906 CEST	49942	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.823558092 CEST	443	49942	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.823622942 CEST	49942	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.823760033 CEST	49942	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.823770046 CEST	443	49942	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.831852913 CEST	443	49939	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.831948996 CEST	443	49939	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.832020044 CEST	49939	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.832175016 CEST	49939	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.832175970 CEST	49939	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.832200050 CEST	443	49939	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.832221985 CEST	443	49939	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.834726095 CEST	49943	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.834754944 CEST	443	49943	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.835059881 CEST	49943	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.835155964 CEST	49943	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.835164070 CEST	443	49943	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.849369049 CEST	443	49938	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.849407911 CEST	443	49938	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.849457979 CEST	443	49938	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.849472046 CEST	49938	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.849549055 CEST	49938	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.849746943 CEST	49938	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.849757910 CEST	443	49938	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.849790096 CEST	49938	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.849795103 CEST	443	49938	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.852555037 CEST	49944	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.852581978 CEST	443	49944	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.852766991 CEST	49944	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.852910995 CEST	49944	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.852921963 CEST	443	49944	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.854482889 CEST	443	49940	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.854666948 CEST	443	49940	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.854720116 CEST	49940	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.854773998 CEST	49940	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.854787111 CEST	443	49940	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.854796886 CEST	49940	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.854801893 CEST	443	49940	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.856952906 CEST	49945	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.856993914 CEST	443	49945	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.857059002 CEST	49945	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.857211113 CEST	49945	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.857227087 CEST	443	49945	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.939008951 CEST	443	49941	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.939078093 CEST	443	49941	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.939153910 CEST	49941	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.939440966 CEST	49941	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.939461946 CEST	443	49941	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.939475060 CEST	49941	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.939482927 CEST	443	49941	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.942658901 CEST	49946	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.942677975 CEST	443	49946	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:31.942743063 CEST	49946	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.942934036 CEST	49946	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:31.942945004 CEST	443	49946	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.579320908 CEST	443	49942	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.587047100 CEST	49942	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.587070942 CEST	443	49942	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.587829113 CEST	49942	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.587835073 CEST	443	49942	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.604208946 CEST	443	49943	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.604892969 CEST	49943	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.604917049 CEST	443	49943	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.605829000 CEST	49943	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.605834961 CEST	443	49943	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.619611979 CEST	443	49944	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.620393991 CEST	49944	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.620413065 CEST	443	49944	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.621126890 CEST	49944	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.621134996 CEST	443	49944	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.632935047 CEST	443	49945	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.633812904 CEST	49945	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.633831024 CEST	443	49945	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.634744883 CEST	49945	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.634749889 CEST	443	49945	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.718431950 CEST	443	49946	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.719196081 CEST	49946	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.719218969 CEST	443	49946	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.719713926 CEST	443	49942	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.720046043 CEST	49946	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.720052958 CEST	443	49946	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.720058918 CEST	443	49942	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.720112085 CEST	443	49942	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.720118046 CEST	49942	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.720176935 CEST	49942	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.720523119 CEST	49942	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.720550060 CEST	443	49942	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.720558882 CEST	49942	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.720566034 CEST	443	49942	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.724108934 CEST	49947	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.724138975 CEST	443	49947	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.724332094 CEST	49947	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.724447012 CEST	49947	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.724461079 CEST	443	49947	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.743473053 CEST	443	49943	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.743654013 CEST	443	49943	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.743736029 CEST	49943	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.743964911 CEST	49943	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.743982077 CEST	443	49943	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.743993998 CEST	49943	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.743999004 CEST	443	49943	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.748003006 CEST	49948	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.748033047 CEST	443	49948	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.748167992 CEST	49948	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.748331070 CEST	49948	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.748344898 CEST	443	49948	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.762686968 CEST	443	49944	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.762759924 CEST	443	49944	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.762900114 CEST	49944	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.763288975 CEST	49944	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.763304949 CEST	443	49944	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.768215895 CEST	49949	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.768387079 CEST	443	49949	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.768677950 CEST	49949	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.769361019 CEST	49949	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.769408941 CEST	443	49949	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.779083967 CEST	443	49945	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.779371977 CEST	443	49945	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.779474974 CEST	443	49945	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.779489994 CEST	49945	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.779489994 CEST	49945	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.779520035 CEST	443	49945	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.779531956 CEST	49945	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.779531956 CEST	49945	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.779537916 CEST	443	49945	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.779546022 CEST	443	49945	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.783328056 CEST	49950	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.783358097 CEST	443	49950	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.783487082 CEST	49950	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.783957958 CEST	49950	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.783970118 CEST	443	49950	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.861123085 CEST	443	49946	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.861182928 CEST	443	49946	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.861517906 CEST	49946	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.861517906 CEST	49946	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.861517906 CEST	49946	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.866121054 CEST	49951	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.866266012 CEST	443	49951	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:32.866368055 CEST	49951	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.866678953 CEST	49951	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:32.866720915 CEST	443	49951	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.171786070 CEST	49946	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.171816111 CEST	443	49946	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.484594107 CEST	443	49947	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.485182047 CEST	49947	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.485200882 CEST	443	49947	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.485785961 CEST	49947	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.485793114 CEST	443	49947	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.521105051 CEST	443	49948	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.521697998 CEST	49948	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.521722078 CEST	443	49948	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.522303104 CEST	49948	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.522308111 CEST	443	49948	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.524992943 CEST	443	49949	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.525345087 CEST	49949	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.525368929 CEST	443	49949	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.525904894 CEST	49949	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.525909901 CEST	443	49949	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.541939020 CEST	443	49950	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.542321920 CEST	49950	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.542330980 CEST	443	49950	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.542768955 CEST	49950	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.542773008 CEST	443	49950	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.623164892 CEST	443	49947	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.623240948 CEST	443	49947	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.623294115 CEST	49947	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.623311043 CEST	443	49947	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.623339891 CEST	443	49947	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.623446941 CEST	49947	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.624411106 CEST	49947	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.624428034 CEST	443	49947	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.624456882 CEST	49947	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.624464989 CEST	443	49947	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.632961035 CEST	49952	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.632977962 CEST	443	49952	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.633059025 CEST	49952	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.633204937 CEST	49952	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.633215904 CEST	443	49952	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.636634111 CEST	443	49951	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.637238979 CEST	49951	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.637249947 CEST	443	49951	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.638319969 CEST	49951	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.638324976 CEST	443	49951	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.660773039 CEST	443	49948	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.661060095 CEST	443	49948	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.661118984 CEST	49948	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.661346912 CEST	49948	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.661361933 CEST	443	49948	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.661371946 CEST	49948	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.661377907 CEST	443	49948	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.662347078 CEST	443	49949	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.662512064 CEST	443	49949	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.662564993 CEST	49949	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.663501024 CEST	49949	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.663501024 CEST	49949	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.663516998 CEST	443	49949	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.663525105 CEST	443	49949	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.668889046 CEST	49953	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.668950081 CEST	443	49953	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.669023037 CEST	49953	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.670512915 CEST	49953	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.670546055 CEST	443	49953	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.671391964 CEST	49954	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.671422958 CEST	443	49954	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.671494007 CEST	49954	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.671983957 CEST	49954	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.671994925 CEST	443	49954	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.678577900 CEST	443	49950	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.678833961 CEST	443	49950	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.678881884 CEST	49950	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.678884983 CEST	443	49950	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.678936005 CEST	49950	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.679008007 CEST	49950	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.679013014 CEST	443	49950	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.679037094 CEST	49950	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.679042101 CEST	443	49950	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.684081078 CEST	49955	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.684127092 CEST	443	49955	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.684232950 CEST	49955	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.684695959 CEST	49955	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.684715033 CEST	443	49955	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.774338961 CEST	443	49951	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.774409056 CEST	443	49951	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.774457932 CEST	49951	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.775144100 CEST	49951	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.775144100 CEST	49951	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.775162935 CEST	443	49951	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.775172949 CEST	443	49951	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.781939030 CEST	49956	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.781974077 CEST	443	49956	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:33.782038927 CEST	49956	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.782565117 CEST	49956	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:33.782576084 CEST	443	49956	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.567780972 CEST	443	49954	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.568936110 CEST	443	49953	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.571100950 CEST	443	49952	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.609168053 CEST	49954	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.609198093 CEST	49953	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.612263918 CEST	49954	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.612272978 CEST	443	49954	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.613535881 CEST	49954	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.613559961 CEST	443	49954	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.618977070 CEST	49953	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.619002104 CEST	443	49953	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.619895935 CEST	49953	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.619904041 CEST	443	49953	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.624090910 CEST	49952	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.624109030 CEST	443	49952	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.658438921 CEST	49952	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.658444881 CEST	443	49952	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.701050997 CEST	443	49955	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.701653004 CEST	443	49956	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.706630945 CEST	49955	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.706664085 CEST	443	49955	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.707379103 CEST	49955	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.707395077 CEST	443	49955	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.707971096 CEST	49956	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.707990885 CEST	443	49956	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.708694935 CEST	49956	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.708698034 CEST	443	49956	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.746117115 CEST	443	49954	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.746608019 CEST	443	49954	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.746665001 CEST	49954	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.746753931 CEST	49954	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.746767044 CEST	443	49954	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.746849060 CEST	49954	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.746854067 CEST	443	49954	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.750482082 CEST	49957	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.750513077 CEST	443	49957	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.750585079 CEST	49957	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.750988960 CEST	49957	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.751003981 CEST	443	49957	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.753247976 CEST	443	49953	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.753277063 CEST	443	49953	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.753321886 CEST	443	49953	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.753340006 CEST	49953	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.753388882 CEST	49953	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.753673077 CEST	49953	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.753673077 CEST	49953	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.753711939 CEST	443	49953	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.753736019 CEST	443	49953	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.757174969 CEST	49958	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.757204056 CEST	443	49958	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.757256985 CEST	49958	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.757566929 CEST	49958	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.757580042 CEST	443	49958	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.770340919 CEST	49959	443	192.168.2.5	52.149.20.212
Oct 24, 2024 18:16:34.770374060 CEST	443	49959	52.149.20.212	192.168.2.5
Oct 24, 2024 18:16:34.770720005 CEST	49959	443	192.168.2.5	52.149.20.212
Oct 24, 2024 18:16:34.771097898 CEST	49959	443	192.168.2.5	52.149.20.212
Oct 24, 2024 18:16:34.771112919 CEST	443	49959	52.149.20.212	192.168.2.5
Oct 24, 2024 18:16:34.792553902 CEST	443	49952	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.792717934 CEST	443	49952	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.792819977 CEST	49952	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.792987108 CEST	49952	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.792999029 CEST	443	49952	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.793009043 CEST	49952	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.793011904 CEST	443	49952	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.796323061 CEST	49960	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.796356916 CEST	443	49960	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.796592951 CEST	49960	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.796649933 CEST	49960	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.796655893 CEST	443	49960	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.841172934 CEST	443	49956	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.841228962 CEST	443	49956	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.841407061 CEST	49956	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.841664076 CEST	49956	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.841677904 CEST	443	49956	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.841685057 CEST	49956	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.841691017 CEST	443	49956	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.842457056 CEST	443	49955	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.842480898 CEST	443	49955	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.842523098 CEST	443	49955	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.842570066 CEST	49955	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.842570066 CEST	49955	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.842907906 CEST	49955	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.842907906 CEST	49955	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.842963934 CEST	443	49955	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.842994928 CEST	443	49955	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.846808910 CEST	49962	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.846810102 CEST	49961	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.846827984 CEST	443	49962	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.846844912 CEST	443	49961	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.846947908 CEST	49962	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.846951008 CEST	49961	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.847335100 CEST	49962	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.847341061 CEST	49961	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:34.847349882 CEST	443	49962	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:34.847359896 CEST	443	49961	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.519750118 CEST	443	49957	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.520385981 CEST	49957	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.520404100 CEST	443	49957	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.521042109 CEST	49957	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.521047115 CEST	443	49957	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.523919106 CEST	443	49958	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.524379969 CEST	49958	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.524395943 CEST	443	49958	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.524935007 CEST	49958	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.524939060 CEST	443	49958	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.558191061 CEST	443	49960	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.558727980 CEST	49960	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.558737993 CEST	443	49960	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.559334040 CEST	49960	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.559339046 CEST	443	49960	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.596987963 CEST	443	49961	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.597471952 CEST	49961	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.597482920 CEST	443	49961	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.598067045 CEST	49961	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.598073006 CEST	443	49961	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.609011889 CEST	443	49962	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.609447956 CEST	49962	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.609468937 CEST	443	49962	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.610074043 CEST	49962	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.610079050 CEST	443	49962	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.656851053 CEST	443	49957	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.656910896 CEST	443	49957	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.657198906 CEST	49957	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.657490015 CEST	49957	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.657500029 CEST	443	49957	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.657514095 CEST	49957	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.657521009 CEST	443	49957	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.660784960 CEST	443	49958	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.660922050 CEST	443	49958	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.660989046 CEST	49958	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.663167953 CEST	49963	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.663203955 CEST	443	49963	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.663484097 CEST	49963	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.663674116 CEST	49958	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.663686991 CEST	443	49958	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.663700104 CEST	49958	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.663703918 CEST	443	49958	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.665308952 CEST	49963	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.665327072 CEST	443	49963	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.668144941 CEST	49964	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.668164968 CEST	443	49964	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.668267965 CEST	49964	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.668492079 CEST	49964	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.668502092 CEST	443	49964	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.695544004 CEST	443	49960	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.696000099 CEST	443	49960	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.696044922 CEST	49960	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.696048975 CEST	443	49960	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.696100950 CEST	49960	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.696154118 CEST	49960	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.696162939 CEST	443	49960	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.696178913 CEST	49960	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.696183920 CEST	443	49960	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.699544907 CEST	49965	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.699608088 CEST	443	49965	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.699981928 CEST	49965	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.699981928 CEST	49965	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.700028896 CEST	443	49965	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.704900026 CEST	443	49959	52.149.20.212	192.168.2.5
Oct 24, 2024 18:16:35.704967976 CEST	49959	443	192.168.2.5	52.149.20.212
Oct 24, 2024 18:16:35.706334114 CEST	49959	443	192.168.2.5	52.149.20.212
Oct 24, 2024 18:16:35.706338882 CEST	443	49959	52.149.20.212	192.168.2.5
Oct 24, 2024 18:16:35.706568003 CEST	443	49959	52.149.20.212	192.168.2.5
Oct 24, 2024 18:16:35.708383083 CEST	49959	443	192.168.2.5	52.149.20.212
Oct 24, 2024 18:16:35.734859943 CEST	443	49961	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.734932899 CEST	443	49961	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.734996080 CEST	49961	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.735301971 CEST	49961	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.735320091 CEST	443	49961	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.735358000 CEST	49961	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.735366106 CEST	443	49961	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.739505053 CEST	49966	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.739557028 CEST	443	49966	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.739758015 CEST	49966	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.739981890 CEST	49966	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.740003109 CEST	443	49966	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.751338959 CEST	443	49959	52.149.20.212	192.168.2.5
Oct 24, 2024 18:16:35.776176929 CEST	443	49962	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.776252031 CEST	443	49962	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.776365042 CEST	443	49962	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.776488066 CEST	49962	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.776612997 CEST	49962	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.776628017 CEST	443	49962	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.776642084 CEST	49962	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.776649952 CEST	443	49962	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.779992104 CEST	49967	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.780045986 CEST	443	49967	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:35.780167103 CEST	49967	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.780343056 CEST	49967	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:35.780375004 CEST	443	49967	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.019773960 CEST	443	49959	52.149.20.212	192.168.2.5
Oct 24, 2024 18:16:36.019798994 CEST	443	49959	52.149.20.212	192.168.2.5
Oct 24, 2024 18:16:36.019818068 CEST	443	49959	52.149.20.212	192.168.2.5
Oct 24, 2024 18:16:36.019869089 CEST	49959	443	192.168.2.5	52.149.20.212
Oct 24, 2024 18:16:36.019890070 CEST	443	49959	52.149.20.212	192.168.2.5
Oct 24, 2024 18:16:36.019917011 CEST	49959	443	192.168.2.5	52.149.20.212
Oct 24, 2024 18:16:36.019958019 CEST	49959	443	192.168.2.5	52.149.20.212
Oct 24, 2024 18:16:36.138900042 CEST	443	49959	52.149.20.212	192.168.2.5
Oct 24, 2024 18:16:36.138950109 CEST	443	49959	52.149.20.212	192.168.2.5
Oct 24, 2024 18:16:36.138983011 CEST	49959	443	192.168.2.5	52.149.20.212
Oct 24, 2024 18:16:36.138991117 CEST	443	49959	52.149.20.212	192.168.2.5
Oct 24, 2024 18:16:36.139054060 CEST	49959	443	192.168.2.5	52.149.20.212
Oct 24, 2024 18:16:36.139061928 CEST	443	49959	52.149.20.212	192.168.2.5
Oct 24, 2024 18:16:36.139100075 CEST	443	49959	52.149.20.212	192.168.2.5
Oct 24, 2024 18:16:36.139105082 CEST	49959	443	192.168.2.5	52.149.20.212
Oct 24, 2024 18:16:36.139148951 CEST	49959	443	192.168.2.5	52.149.20.212
Oct 24, 2024 18:16:36.139244080 CEST	49959	443	192.168.2.5	52.149.20.212
Oct 24, 2024 18:16:36.139261961 CEST	443	49959	52.149.20.212	192.168.2.5
Oct 24, 2024 18:16:36.139275074 CEST	49959	443	192.168.2.5	52.149.20.212
Oct 24, 2024 18:16:36.139282942 CEST	443	49959	52.149.20.212	192.168.2.5
Oct 24, 2024 18:16:36.418256044 CEST	443	49964	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.418896914 CEST	49964	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.418910027 CEST	443	49964	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.419609070 CEST	49964	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.419615030 CEST	443	49964	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.424249887 CEST	443	49963	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.424829006 CEST	49963	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.424838066 CEST	443	49963	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.425318956 CEST	49963	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.425324917 CEST	443	49963	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.445986032 CEST	443	49965	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.446384907 CEST	49965	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.446408033 CEST	443	49965	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.447119951 CEST	49965	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.447135925 CEST	443	49965	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.505721092 CEST	443	49966	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.506314993 CEST	49966	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.506329060 CEST	443	49966	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.506864071 CEST	49966	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.506886959 CEST	443	49966	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.546454906 CEST	443	49967	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.547039032 CEST	49967	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.547090054 CEST	443	49967	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.547606945 CEST	49967	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.547617912 CEST	443	49967	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.555026054 CEST	443	49964	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.555052042 CEST	443	49964	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.555100918 CEST	443	49964	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.555115938 CEST	49964	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.555145025 CEST	49964	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.555461884 CEST	49964	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.555474997 CEST	443	49964	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.555485010 CEST	49964	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.555490971 CEST	443	49964	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.558909893 CEST	49968	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.558937073 CEST	443	49968	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.559000015 CEST	49968	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.559169054 CEST	49968	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.559182882 CEST	443	49968	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.563002110 CEST	443	49963	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.563069105 CEST	443	49963	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.563122988 CEST	49963	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.563215971 CEST	49963	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.563241005 CEST	443	49963	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.563249111 CEST	49963	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.563254118 CEST	443	49963	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.566196918 CEST	49969	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.566226959 CEST	443	49969	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.566353083 CEST	49969	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.566555023 CEST	49969	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.566567898 CEST	443	49969	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.581521034 CEST	443	49965	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.581566095 CEST	443	49965	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.581644058 CEST	49965	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.581921101 CEST	49965	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.581953049 CEST	443	49965	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.581990004 CEST	49965	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.582003117 CEST	443	49965	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.585437059 CEST	49970	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.585454941 CEST	443	49970	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.585510015 CEST	49970	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.585658073 CEST	49970	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.585669041 CEST	443	49970	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.645148039 CEST	443	49966	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.645303965 CEST	443	49966	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.645395041 CEST	49966	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.645590067 CEST	49966	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.645590067 CEST	49966	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.645597935 CEST	443	49966	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.645605087 CEST	443	49966	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.649194956 CEST	49971	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.649213076 CEST	443	49971	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.649303913 CEST	49971	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.649416924 CEST	49971	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.649425983 CEST	443	49971	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.685503006 CEST	443	49967	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.685908079 CEST	443	49967	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.685997009 CEST	49967	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.686028957 CEST	49967	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.686028957 CEST	49967	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.686050892 CEST	443	49967	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.686055899 CEST	443	49967	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.690083981 CEST	49972	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.690116882 CEST	443	49972	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:36.690197945 CEST	49972	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.690440893 CEST	49972	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:36.690474033 CEST	443	49972	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.367592096 CEST	443	49970	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.368093967 CEST	49970	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.368117094 CEST	443	49970	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.368623018 CEST	49970	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.368628025 CEST	443	49970	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.370081902 CEST	443	49968	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.370160103 CEST	443	49969	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.370414019 CEST	49968	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.370429039 CEST	443	49968	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.370975971 CEST	49968	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.370985031 CEST	443	49968	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.371364117 CEST	49969	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.371392965 CEST	443	49969	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.371778965 CEST	49969	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.371797085 CEST	443	49969	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.396305084 CEST	443	49971	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.396810055 CEST	49971	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.396836042 CEST	443	49971	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.397368908 CEST	49971	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.397386074 CEST	443	49971	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.455893993 CEST	443	49972	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.456609011 CEST	49972	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.456630945 CEST	443	49972	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.456985950 CEST	49972	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.456990957 CEST	443	49972	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.503774881 CEST	443	49970	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.503850937 CEST	443	49970	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.504075050 CEST	49970	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.504173994 CEST	49970	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.504189014 CEST	443	49970	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.504200935 CEST	49970	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.504205942 CEST	443	49970	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.507065058 CEST	49973	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.507097960 CEST	443	49968	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.507101059 CEST	443	49973	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.507216930 CEST	49973	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.507282019 CEST	443	49969	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.507388115 CEST	49973	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.507402897 CEST	443	49973	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.507582903 CEST	443	49968	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.507628918 CEST	443	49968	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.507693052 CEST	49968	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.507700920 CEST	443	49969	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.507709980 CEST	49968	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.507714033 CEST	443	49968	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.507723093 CEST	49968	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.507726908 CEST	443	49968	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.507747889 CEST	49969	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.508033037 CEST	49969	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.508064985 CEST	443	49969	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.508171082 CEST	49969	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.508183956 CEST	443	49969	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.509946108 CEST	49974	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.509978056 CEST	443	49974	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.510164022 CEST	49974	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.510164976 CEST	49975	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.510180950 CEST	443	49975	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.510241985 CEST	49975	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.510279894 CEST	49974	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.510293961 CEST	443	49974	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.510373116 CEST	49975	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.510385036 CEST	443	49975	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.533752918 CEST	443	49971	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.533816099 CEST	443	49971	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.533956051 CEST	49971	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.534039974 CEST	49971	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.534039974 CEST	49971	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.534053087 CEST	443	49971	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.534061909 CEST	443	49971	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.536511898 CEST	49976	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.536541939 CEST	443	49976	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.536614895 CEST	49976	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.536730051 CEST	49976	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.536772966 CEST	443	49976	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.593954086 CEST	443	49972	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.594029903 CEST	443	49972	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.594110012 CEST	49972	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.594392061 CEST	49972	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.594392061 CEST	49972	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.594414949 CEST	443	49972	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.594423056 CEST	443	49972	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.597470045 CEST	49977	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.597503901 CEST	443	49977	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:37.597762108 CEST	49977	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.597954988 CEST	49977	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:37.597970963 CEST	443	49977	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:38.270211935 CEST	443	49973	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:38.270582914 CEST	443	49975	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:38.270740032 CEST	49973	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:38.270775080 CEST	443	49973	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:38.271248102 CEST	49973	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:38.271254063 CEST	443	49973	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:38.271696091 CEST	49975	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:38.271708965 CEST	443	49975	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:38.272131920 CEST	49975	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:38.272136927 CEST	443	49975	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:38.284996986 CEST	443	49974	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:38.285945892 CEST	49974	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:38.285958052 CEST	443	49974	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:38.286448002 CEST	49974	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:38.286453009 CEST	443	49974	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:38.355840921 CEST	443	49977	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:38.356920004 CEST	49977	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:38.356939077 CEST	443	49977	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:38.357810974 CEST	49977	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:38.357817888 CEST	443	49977	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:38.406303883 CEST	443	49973	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:38.406382084 CEST	443	49973	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:38.406511068 CEST	49973	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:38.406956911 CEST	49973	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:38.406975031 CEST	443	49973	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:38.406987906 CEST	49973	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:38.406995058 CEST	443	49973	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:38.409185886 CEST	443	49975	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:38.409421921 CEST	443	49975	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:38.409496069 CEST	49975	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:38.410593987 CEST	49975	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:38.410604000 CEST	443	49975	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:38.412978888 CEST	49978	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:38.413031101 CEST	443	49978	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:38.413602114 CEST	49978	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:38.416721106 CEST	49979	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:38.416755915 CEST	443	49979	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:38.417037964 CEST	49978	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:38.417038918 CEST	49979	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:38.417052984 CEST	443	49978	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:38.417414904 CEST	49979	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:38.417427063 CEST	443	49979	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:38.425688982 CEST	443	49974	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:38.425760984 CEST	443	49974	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:38.425986052 CEST	49974	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:38.437736988 CEST	49974	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:38.437736988 CEST	49974	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:38.437752962 CEST	443	49974	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:38.437762022 CEST	443	49974	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:38.452802896 CEST	49980	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:38.452840090 CEST	443	49980	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:38.452986956 CEST	49980	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:38.453293085 CEST	49980	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:38.453305960 CEST	443	49980	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:38.493246078 CEST	443	49977	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:38.493319035 CEST	443	49977	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:38.493395090 CEST	49977	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:38.494164944 CEST	49977	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:38.494173050 CEST	443	49977	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:38.494185925 CEST	49977	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:38.494189978 CEST	443	49977	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:38.500370979 CEST	49981	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:38.500399113 CEST	443	49981	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:38.500463963 CEST	49981	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:38.501158953 CEST	49981	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:38.501178026 CEST	443	49981	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.166771889 CEST	443	49979	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.167556047 CEST	49979	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.167587996 CEST	443	49979	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.168783903 CEST	49979	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.168791056 CEST	443	49979	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.173763990 CEST	443	49978	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.174312115 CEST	49978	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.174375057 CEST	443	49978	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.174998999 CEST	49978	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.175014019 CEST	443	49978	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.210515976 CEST	443	49980	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.222688913 CEST	49980	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.222712040 CEST	443	49980	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.230181932 CEST	49980	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.230189085 CEST	443	49980	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.269015074 CEST	443	49981	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.269475937 CEST	49981	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.269506931 CEST	443	49981	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.269870996 CEST	49981	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.269879103 CEST	443	49981	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.302831888 CEST	443	49979	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.302915096 CEST	443	49979	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.303033113 CEST	49979	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.303406000 CEST	49979	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.303406000 CEST	49979	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.303438902 CEST	443	49979	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.303452969 CEST	443	49979	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.306796074 CEST	49982	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.306839943 CEST	443	49982	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.306910038 CEST	49982	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.307265997 CEST	49982	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.307280064 CEST	443	49982	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.312530041 CEST	443	49978	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.312678099 CEST	443	49978	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.312721968 CEST	443	49978	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.312733889 CEST	49978	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.312788963 CEST	49978	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.312875986 CEST	49978	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.312917948 CEST	443	49978	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.312944889 CEST	49978	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.312961102 CEST	443	49978	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.315682888 CEST	49983	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.315711975 CEST	443	49983	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.315768003 CEST	49983	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.316092968 CEST	49983	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.316107988 CEST	443	49983	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.361902952 CEST	443	49980	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.361937046 CEST	443	49980	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.361979961 CEST	49980	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.361989021 CEST	443	49980	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.362040997 CEST	49980	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.362221956 CEST	49980	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.362221956 CEST	49980	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.362238884 CEST	443	49980	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.362247944 CEST	443	49980	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.365401983 CEST	49984	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.365433931 CEST	443	49984	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.365502119 CEST	49984	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.365649939 CEST	49984	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.365664959 CEST	443	49984	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.402841091 CEST	443	49981	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.402993917 CEST	443	49981	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.403058052 CEST	49981	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.403175116 CEST	49981	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.403191090 CEST	443	49981	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.403203964 CEST	49981	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.403211117 CEST	443	49981	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.406075954 CEST	49985	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.406109095 CEST	443	49985	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.406267881 CEST	49985	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.406411886 CEST	49985	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.406424999 CEST	443	49985	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.475145102 CEST	443	49976	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.475625992 CEST	49976	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.475677967 CEST	443	49976	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.476080894 CEST	49976	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.476088047 CEST	443	49976	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.612164021 CEST	443	49976	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.612200975 CEST	443	49976	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.612248898 CEST	443	49976	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.612294912 CEST	49976	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.612334967 CEST	49976	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.612559080 CEST	49976	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.612585068 CEST	443	49976	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.612603903 CEST	49976	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.612620115 CEST	443	49976	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.615601063 CEST	49987	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.615633965 CEST	443	49987	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:39.615726948 CEST	49987	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.615921021 CEST	49987	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:39.615936995 CEST	443	49987	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.054644108 CEST	443	49982	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.055294037 CEST	49982	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.055327892 CEST	443	49982	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.055927992 CEST	49982	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.055932999 CEST	443	49982	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.066020966 CEST	443	49983	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.066764116 CEST	49983	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.066787958 CEST	443	49983	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.067337036 CEST	49983	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.067348957 CEST	443	49983	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.134314060 CEST	443	49984	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.134994984 CEST	49984	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.135016918 CEST	443	49984	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.135787010 CEST	49984	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.135802031 CEST	443	49984	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.158179998 CEST	443	49985	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.164787054 CEST	49985	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.164808989 CEST	443	49985	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.165868998 CEST	49985	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.165874004 CEST	443	49985	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.190224886 CEST	443	49982	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.190298080 CEST	443	49982	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.190366983 CEST	49982	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.194046974 CEST	49982	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.194062948 CEST	443	49982	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.198265076 CEST	49988	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.198312044 CEST	443	49988	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.198399067 CEST	49988	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.198647976 CEST	49988	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.198662996 CEST	443	49988	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.203576088 CEST	443	49983	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.203630924 CEST	443	49983	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.203874111 CEST	49983	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.204221964 CEST	49983	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.204241037 CEST	443	49983	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.204252005 CEST	49983	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.204257965 CEST	443	49983	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.208272934 CEST	49989	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.208375931 CEST	443	49989	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.208457947 CEST	49989	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.208754063 CEST	49989	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.208791018 CEST	443	49989	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.298067093 CEST	443	49985	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.298597097 CEST	443	49985	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.298662901 CEST	49985	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.298906088 CEST	49985	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.298928022 CEST	443	49985	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.298942089 CEST	49985	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.298948050 CEST	443	49985	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.307964087 CEST	49990	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.308011055 CEST	443	49990	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.308131933 CEST	49990	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.308382034 CEST	49990	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.308399916 CEST	443	49990	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.358284950 CEST	443	49984	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.358494997 CEST	443	49984	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.358550072 CEST	49984	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.358555079 CEST	443	49984	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.358601093 CEST	49984	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.359236956 CEST	49984	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.359256029 CEST	443	49984	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.359270096 CEST	49984	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.359277964 CEST	443	49984	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.363066912 CEST	49991	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.363174915 CEST	443	49991	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.363363028 CEST	49991	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.363533974 CEST	49991	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.363574028 CEST	443	49991	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.384860039 CEST	443	49987	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.385867119 CEST	49987	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.385881901 CEST	443	49987	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.388736963 CEST	49987	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.388745070 CEST	443	49987	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.521409035 CEST	443	49987	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.521567106 CEST	443	49987	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.521632910 CEST	49987	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.521881104 CEST	49987	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.521897078 CEST	443	49987	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.525783062 CEST	49992	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.525800943 CEST	443	49992	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.525990009 CEST	49992	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.526233912 CEST	49992	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.526245117 CEST	443	49992	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.948544979 CEST	443	49989	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.949182987 CEST	49989	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.949246883 CEST	443	49989	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:40.949769020 CEST	49989	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:40.949784994 CEST	443	49989	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.071290970 CEST	443	49990	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.071877956 CEST	49990	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.071901083 CEST	443	49990	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.072400093 CEST	49990	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.072406054 CEST	443	49990	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.089862108 CEST	443	49989	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.090111017 CEST	443	49989	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.090188980 CEST	49989	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.090298891 CEST	49989	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.090298891 CEST	49989	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.090348959 CEST	443	49989	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.090375900 CEST	443	49989	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.093256950 CEST	49993	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.093297005 CEST	443	49993	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.093458891 CEST	49993	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.093610048 CEST	49993	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.093635082 CEST	443	49993	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.102056980 CEST	443	49991	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.102458954 CEST	49991	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.102485895 CEST	443	49991	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.102919102 CEST	49991	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.102931976 CEST	443	49991	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.209891081 CEST	443	49990	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.209918022 CEST	443	49990	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.209990978 CEST	49990	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.210011005 CEST	443	49990	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.210031986 CEST	443	49990	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.210079908 CEST	49990	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.230103970 CEST	49990	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.230123043 CEST	443	49990	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.230135918 CEST	49990	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.230143070 CEST	443	49990	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.235182047 CEST	49994	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.235227108 CEST	443	49994	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.235290051 CEST	49994	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.235574007 CEST	49994	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.235589027 CEST	443	49994	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.286286116 CEST	443	49992	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.287370920 CEST	49992	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.287379980 CEST	443	49992	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.288485050 CEST	49992	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.288490057 CEST	443	49992	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.308068037 CEST	443	49988	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.308801889 CEST	49988	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.308825016 CEST	443	49988	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.309499025 CEST	49988	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.309509039 CEST	443	49988	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.424777031 CEST	443	49992	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.424794912 CEST	443	49992	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.424884081 CEST	49992	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.424895048 CEST	443	49992	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.425158978 CEST	443	49992	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.425215960 CEST	49992	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.442894936 CEST	49992	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.442908049 CEST	443	49992	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.446779013 CEST	443	49988	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.446795940 CEST	443	49988	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.446866989 CEST	49988	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.446882010 CEST	443	49988	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.446939945 CEST	443	49988	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.446986914 CEST	49988	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.490014076 CEST	49988	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.490031004 CEST	443	49988	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.560698032 CEST	49995	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.560750008 CEST	443	49995	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.560827017 CEST	49995	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.561762094 CEST	49996	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.561788082 CEST	443	49996	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.561960936 CEST	49996	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.565143108 CEST	49995	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.565175056 CEST	443	49995	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.565762997 CEST	49996	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.565773964 CEST	443	49996	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.751343012 CEST	443	49991	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.751372099 CEST	443	49991	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.751533031 CEST	49991	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.751595020 CEST	443	49991	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.751981974 CEST	443	49991	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.752084017 CEST	49991	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.757078886 CEST	49991	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.757131100 CEST	443	49991	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.757165909 CEST	49991	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.757181883 CEST	443	49991	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.765444994 CEST	49997	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.765475988 CEST	443	49997	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.765541077 CEST	49997	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.765836954 CEST	49997	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.765863895 CEST	443	49997	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.841324091 CEST	443	49993	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.842165947 CEST	49993	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.842195034 CEST	443	49993	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.866714954 CEST	49993	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.866730928 CEST	443	49993	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.999577045 CEST	443	49993	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.999636889 CEST	443	49993	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.999763012 CEST	49993	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:41.999787092 CEST	443	49993	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:41.999852896 CEST	49993	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.004311085 CEST	443	49994	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.008846045 CEST	49993	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.008846998 CEST	49993	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.008872032 CEST	443	49993	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.008887053 CEST	443	49993	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.036771059 CEST	49994	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.036797047 CEST	443	49994	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.037540913 CEST	49994	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.037545919 CEST	443	49994	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.039589882 CEST	49998	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.039630890 CEST	443	49998	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.042433023 CEST	49998	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.043293953 CEST	49998	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.043304920 CEST	443	49998	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.170792103 CEST	443	49994	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.170872927 CEST	443	49994	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.171088934 CEST	49994	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.171255112 CEST	49994	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.171272039 CEST	443	49994	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.171278000 CEST	49994	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.171283007 CEST	443	49994	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.174391031 CEST	49999	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.174444914 CEST	443	49999	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.174523115 CEST	49999	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.174748898 CEST	49999	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.174762011 CEST	443	49999	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.340276003 CEST	443	49995	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.340847015 CEST	49995	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.340879917 CEST	443	49995	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.341516018 CEST	49995	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.341525078 CEST	443	49995	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.345082998 CEST	443	49996	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.345474005 CEST	49996	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.345485926 CEST	443	49996	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.345937014 CEST	49996	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.345949888 CEST	443	49996	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.482544899 CEST	443	49995	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.482606888 CEST	443	49995	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.482728004 CEST	49995	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.482880116 CEST	49995	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.482880116 CEST	49995	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.482899904 CEST	443	49995	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.482939959 CEST	443	49995	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.485714912 CEST	50000	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.485749960 CEST	443	50000	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.485838890 CEST	50000	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.485985041 CEST	50000	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.486018896 CEST	443	50000	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.489468098 CEST	443	49996	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.489518881 CEST	443	49996	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.489607096 CEST	49996	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.489720106 CEST	49996	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.489720106 CEST	49996	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.489738941 CEST	443	49996	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.489748001 CEST	443	49996	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.491873980 CEST	50001	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.491894007 CEST	443	50001	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.491956949 CEST	50001	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.492115974 CEST	50001	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.492125034 CEST	443	50001	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.536664009 CEST	443	49997	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.537159920 CEST	49997	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.537193060 CEST	443	49997	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.538175106 CEST	49997	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.538184881 CEST	443	49997	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.800184965 CEST	443	49998	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.800728083 CEST	49998	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.800739050 CEST	443	49998	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.801243067 CEST	49998	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.801249027 CEST	443	49998	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.867816925 CEST	443	49997	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.868033886 CEST	443	49997	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.868091106 CEST	49997	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.868151903 CEST	49997	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.868172884 CEST	443	49997	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.868184090 CEST	49997	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.868200064 CEST	443	49997	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.871068001 CEST	50002	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.871109009 CEST	443	50002	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.871200085 CEST	50002	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.871385098 CEST	50002	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.871402979 CEST	443	50002	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.927803040 CEST	443	49999	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.928349018 CEST	49999	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.928371906 CEST	443	49999	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.928909063 CEST	49999	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.928914070 CEST	443	49999	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.938669920 CEST	443	49998	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.938730955 CEST	443	49998	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.938782930 CEST	49998	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.938795090 CEST	443	49998	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.938843966 CEST	49998	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.938848972 CEST	443	49998	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.938940048 CEST	443	49998	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.938992977 CEST	49998	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.939089060 CEST	49998	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.939104080 CEST	443	49998	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.939115047 CEST	49998	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.939120054 CEST	443	49998	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.942291975 CEST	50003	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.942334890 CEST	443	50003	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:42.942452908 CEST	50003	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.942608118 CEST	50003	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:42.942620039 CEST	443	50003	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.065485954 CEST	443	49999	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.065557957 CEST	443	49999	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.065630913 CEST	49999	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.065646887 CEST	443	49999	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.065731049 CEST	443	49999	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.065838099 CEST	49999	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.065937996 CEST	49999	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.065959930 CEST	49999	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.065959930 CEST	443	49999	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.065967083 CEST	443	49999	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.069176912 CEST	50004	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.069205999 CEST	443	50004	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.069271088 CEST	50004	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.069437981 CEST	50004	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.069447994 CEST	443	50004	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.236417055 CEST	443	50001	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.237349033 CEST	50001	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.237361908 CEST	443	50001	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.237937927 CEST	50001	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.237942934 CEST	443	50001	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.260277987 CEST	443	50000	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.260832071 CEST	50000	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.260847092 CEST	443	50000	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.261326075 CEST	50000	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.261339903 CEST	443	50000	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.373452902 CEST	443	50001	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.373480082 CEST	443	50001	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.373534918 CEST	50001	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.373554945 CEST	443	50001	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.373673916 CEST	443	50001	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.373774052 CEST	50001	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.373859882 CEST	50001	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.373871088 CEST	443	50001	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.373887062 CEST	50001	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.373892069 CEST	443	50001	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.377161026 CEST	50005	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.377191067 CEST	443	50005	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.377392054 CEST	50005	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.377593994 CEST	50005	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.377604961 CEST	443	50005	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.517565012 CEST	443	50000	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.517596960 CEST	443	50000	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.517617941 CEST	443	50000	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.517663956 CEST	50000	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.517677069 CEST	443	50000	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.517733097 CEST	50000	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.517733097 CEST	50000	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.518032074 CEST	443	50000	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.518090963 CEST	443	50000	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.518140078 CEST	50000	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.518140078 CEST	50000	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.518208027 CEST	50000	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.518208027 CEST	50000	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.518224955 CEST	443	50000	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.518233061 CEST	443	50000	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.521260977 CEST	50006	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.521291018 CEST	443	50006	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.521349907 CEST	50006	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.521490097 CEST	50006	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.521505117 CEST	443	50006	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.626785040 CEST	443	50002	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.627341032 CEST	50002	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.627352953 CEST	443	50002	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.627964020 CEST	50002	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.627969980 CEST	443	50002	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.685867071 CEST	443	50003	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.686275005 CEST	50003	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.686311960 CEST	443	50003	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.686718941 CEST	50003	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.686726093 CEST	443	50003	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.821507931 CEST	443	50003	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.821532011 CEST	443	50003	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.821605921 CEST	50003	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.821613073 CEST	443	50003	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.821661949 CEST	50003	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.821940899 CEST	50003	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.821969032 CEST	443	50003	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.821983099 CEST	50003	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.821993113 CEST	443	50003	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.825412989 CEST	50007	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.825448990 CEST	443	50007	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.825579882 CEST	50007	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.825773001 CEST	50007	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.825787067 CEST	443	50007	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.829492092 CEST	443	50004	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.829946041 CEST	50004	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.829968929 CEST	443	50004	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:43.830466986 CEST	50004	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:43.830483913 CEST	443	50004	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:44.065246105 CEST	443	50002	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:44.065264940 CEST	443	50002	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:44.065301895 CEST	443	50002	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:44.065382957 CEST	50002	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:44.065382957 CEST	50002	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:44.065392017 CEST	443	50002	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:44.065434933 CEST	50002	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:44.067059994 CEST	443	50002	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:44.067125082 CEST	50002	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:44.067131996 CEST	443	50002	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:44.067265034 CEST	50002	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:44.067265034 CEST	50002	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:44.067303896 CEST	50002	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:44.067323923 CEST	443	50002	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:44.070472002 CEST	50008	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:44.070511103 CEST	443	50008	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:44.070813894 CEST	50008	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:44.071017027 CEST	50008	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:44.071029902 CEST	443	50008	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:44.191663980 CEST	443	50004	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:44.191718102 CEST	443	50004	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:44.191824913 CEST	50004	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:44.191838026 CEST	443	50004	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:44.191858053 CEST	443	50004	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:44.191937923 CEST	50004	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:44.192131996 CEST	50004	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:44.192154884 CEST	443	50004	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:44.192172050 CEST	50004	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:44.192178011 CEST	443	50004	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:44.195338011 CEST	50009	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:44.195374012 CEST	443	50009	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:44.195504904 CEST	50009	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:44.195672035 CEST	50009	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:44.195687056 CEST	443	50009	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:44.211494923 CEST	443	50005	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:44.212017059 CEST	50005	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:44.212025881 CEST	443	50005	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:44.212486029 CEST	50005	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:44.212491989 CEST	443	50005	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:44.274302959 CEST	443	50006	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:44.274754047 CEST	50006	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:44.274771929 CEST	443	50006	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:44.275357962 CEST	50006	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:44.275369883 CEST	443	50006	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:44.350836039 CEST	443	50005	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:44.350928068 CEST	443	50005	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:44.351031065 CEST	50005	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:44.351269007 CEST	50005	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:44.351269007 CEST	50005	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:44.351279020 CEST	443	50005	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:44.351286888 CEST	443	50005	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:44.354516983 CEST	50010	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:44.354535103 CEST	443	50010	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:44.354598999 CEST	50010	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:44.354753971 CEST	50010	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:44.354764938 CEST	443	50010	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:44.411216021 CEST	443	50006	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:44.411648035 CEST	443	50006	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:44.411739111 CEST	50006	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:44.411784887 CEST	50006	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:44.411798954 CEST	443	50006	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:44.411823034 CEST	50006	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:44.411832094 CEST	443	50006	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:44.414233923 CEST	50011	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:44.414268970 CEST	443	50011	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:44.414362907 CEST	50011	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:44.414478064 CEST	50011	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:44.414489031 CEST	443	50011	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.058320045 CEST	443	50007	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.058895111 CEST	50007	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:45.058909893 CEST	443	50007	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.059459925 CEST	50007	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:45.059464931 CEST	443	50007	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.068047047 CEST	443	50008	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.068438053 CEST	50008	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:45.068460941 CEST	443	50008	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.068922043 CEST	50008	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:45.068927050 CEST	443	50008	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.071696997 CEST	443	50009	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.072011948 CEST	50009	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:45.072042942 CEST	443	50009	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.072478056 CEST	50009	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:45.072484970 CEST	443	50009	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.104607105 CEST	443	50010	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.105077028 CEST	50010	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:45.105093002 CEST	443	50010	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.105531931 CEST	50010	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:45.105536938 CEST	443	50010	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.179167986 CEST	443	50011	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.179785013 CEST	50011	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:45.179805994 CEST	443	50011	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.180296898 CEST	50011	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:45.180300951 CEST	443	50011	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.195246935 CEST	443	50007	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.195342064 CEST	443	50007	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.195398092 CEST	50007	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:45.195547104 CEST	50007	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:45.195564032 CEST	443	50007	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.195616007 CEST	50007	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:45.195621967 CEST	443	50007	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.198316097 CEST	50012	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:45.198409081 CEST	443	50012	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.198595047 CEST	50012	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:45.198728085 CEST	50012	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:45.198764086 CEST	443	50012	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.205373049 CEST	443	50008	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.205864906 CEST	443	50008	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.205920935 CEST	50008	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:45.205943108 CEST	50008	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:45.205955029 CEST	443	50008	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.205967903 CEST	50008	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:45.205972910 CEST	443	50008	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.208209991 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:45.208246946 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.208617926 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:45.208617926 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:45.208647013 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.212078094 CEST	443	50009	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.212117910 CEST	443	50009	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.212160110 CEST	443	50009	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.212174892 CEST	50009	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:45.212209940 CEST	50009	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:45.212399006 CEST	50009	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:45.212399006 CEST	50009	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:45.212409019 CEST	443	50009	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.212418079 CEST	443	50009	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.277992010 CEST	443	50010	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.278070927 CEST	443	50010	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.278150082 CEST	50010	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:45.278218985 CEST	50010	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:45.278223991 CEST	443	50010	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.278233051 CEST	50010	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:45.278235912 CEST	443	50010	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.316380978 CEST	443	50011	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.316541910 CEST	443	50011	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.316654921 CEST	50011	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:45.320347071 CEST	50011	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:45.320363045 CEST	443	50011	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.961113930 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.961745024 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:45.961761951 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.962469101 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:45.962475061 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.965261936 CEST	443	50012	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.965747118 CEST	50012	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:45.965785027 CEST	443	50012	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:45.966533899 CEST	50012	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:45.966547966 CEST	443	50012	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:46.097750902 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:46.097881079 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:46.097929955 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:46.098232031 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:46.098244905 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:46.104554892 CEST	443	50012	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:46.104614973 CEST	443	50012	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:46.104777098 CEST	50012	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:46.105043888 CEST	50012	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:46.105087042 CEST	443	50012	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:46.105113983 CEST	50012	443	192.168.2.5	13.107.253.45
Oct 24, 2024 18:16:46.105128050 CEST	443	50012	13.107.253.45	192.168.2.5
Oct 24, 2024 18:16:49.991497993 CEST	52049	53	192.168.2.5	1.1.1.1
Oct 24, 2024 18:16:49.996922016 CEST	53	52049	1.1.1.1	192.168.2.5
Oct 24, 2024 18:16:49.997272015 CEST	52049	53	192.168.2.5	1.1.1.1
Oct 24, 2024 18:16:49.997384071 CEST	52049	53	192.168.2.5	1.1.1.1
Oct 24, 2024 18:16:50.002684116 CEST	53	52049	1.1.1.1	192.168.2.5
Oct 24, 2024 18:16:50.615585089 CEST	53	52049	1.1.1.1	192.168.2.5
Oct 24, 2024 18:16:50.616219997 CEST	52049	53	192.168.2.5	1.1.1.1
Oct 24, 2024 18:16:50.622487068 CEST	53	52049	1.1.1.1	192.168.2.5
Oct 24, 2024 18:16:50.622566938 CEST	52049	53	192.168.2.5	1.1.1.1
Oct 24, 2024 18:16:50.687870979 CEST	52051	443	192.168.2.5	172.217.16.196
Oct 24, 2024 18:16:50.687911034 CEST	443	52051	172.217.16.196	192.168.2.5
Oct 24, 2024 18:16:50.687982082 CEST	52051	443	192.168.2.5	172.217.16.196
Oct 24, 2024 18:16:50.688268900 CEST	52051	443	192.168.2.5	172.217.16.196
Oct 24, 2024 18:16:50.688282013 CEST	443	52051	172.217.16.196	192.168.2.5
Oct 24, 2024 18:16:52.084378004 CEST	443	52051	172.217.16.196	192.168.2.5
Oct 24, 2024 18:16:52.084721088 CEST	52051	443	192.168.2.5	172.217.16.196
Oct 24, 2024 18:16:52.084737062 CEST	443	52051	172.217.16.196	192.168.2.5
Oct 24, 2024 18:16:52.085084915 CEST	443	52051	172.217.16.196	192.168.2.5
Oct 24, 2024 18:16:52.085465908 CEST	52051	443	192.168.2.5	172.217.16.196
Oct 24, 2024 18:16:52.085529089 CEST	443	52051	172.217.16.196	192.168.2.5
Oct 24, 2024 18:16:52.139266968 CEST	52051	443	192.168.2.5	172.217.16.196
Oct 24, 2024 18:16:56.836987019 CEST	52052	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:56.837033033 CEST	443	52052	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:56.837184906 CEST	52052	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:56.838651896 CEST	52052	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:56.838661909 CEST	443	52052	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:56.850024939 CEST	52053	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:56.850068092 CEST	443	52053	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:56.850234032 CEST	52053	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:56.851129055 CEST	52053	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:56.851144075 CEST	443	52053	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:57.936652899 CEST	443	52052	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:57.936733961 CEST	52052	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:57.943240881 CEST	52052	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:57.943252087 CEST	443	52052	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:57.943521023 CEST	443	52052	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:57.945888996 CEST	52052	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:57.945888996 CEST	52052	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:57.945909977 CEST	443	52052	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:57.946209908 CEST	52052	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:57.963332891 CEST	443	52053	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:57.963419914 CEST	52053	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:57.965492010 CEST	52053	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:57.965506077 CEST	443	52053	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:57.965765953 CEST	443	52053	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:57.968486071 CEST	52053	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:57.968570948 CEST	52053	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:57.968595028 CEST	443	52053	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:57.968691111 CEST	52053	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:57.987337112 CEST	443	52052	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:58.015336037 CEST	443	52053	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:58.193108082 CEST	443	52052	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:58.193799973 CEST	52052	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:58.193825006 CEST	443	52052	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:58.193840027 CEST	52052	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:58.193977118 CEST	52052	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:58.218357086 CEST	443	52053	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:58.218907118 CEST	52053	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:58.218935013 CEST	443	52053	40.113.103.199	192.168.2.5
Oct 24, 2024 18:16:58.218955040 CEST	52053	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:16:58.218986988 CEST	52053	443	192.168.2.5	40.113.103.199
Oct 24, 2024 18:17:02.082380056 CEST	443	52051	172.217.16.196	192.168.2.5
Oct 24, 2024 18:17:02.082458019 CEST	443	52051	172.217.16.196	192.168.2.5
Oct 24, 2024 18:17:02.082515955 CEST	52051	443	192.168.2.5	172.217.16.196
Oct 24, 2024 18:17:03.741971016 CEST	52051	443	192.168.2.5	172.217.16.196
Oct 24, 2024 18:17:03.742003918 CEST	443	52051	172.217.16.196	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 18:15:47.177894115 CEST	53	54693	1.1.1.1	192.168.2.5
Oct 24, 2024 18:15:47.184586048 CEST	53	57261	1.1.1.1	192.168.2.5
Oct 24, 2024 18:15:49.027374029 CEST	59843	53	192.168.2.5	1.1.1.1
Oct 24, 2024 18:15:49.027570009 CEST	51505	53	192.168.2.5	1.1.1.1
Oct 24, 2024 18:15:49.487981081 CEST	53	63492	1.1.1.1	192.168.2.5
Oct 24, 2024 18:15:50.479496002 CEST	64284	53	192.168.2.5	1.1.1.1
Oct 24, 2024 18:15:50.479784966 CEST	64598	53	192.168.2.5	1.1.1.1
Oct 24, 2024 18:15:50.625246048 CEST	60504	53	192.168.2.5	1.1.1.1
Oct 24, 2024 18:15:50.625441074 CEST	56075	53	192.168.2.5	1.1.1.1
Oct 24, 2024 18:15:50.632576942 CEST	53	60504	1.1.1.1	192.168.2.5
Oct 24, 2024 18:15:50.633605957 CEST	53	56075	1.1.1.1	192.168.2.5
Oct 24, 2024 18:15:51.695349932 CEST	52830	53	192.168.2.5	1.1.1.1
Oct 24, 2024 18:15:51.695549965 CEST	59042	53	192.168.2.5	1.1.1.1
Oct 24, 2024 18:16:06.696405888 CEST	53	51599	1.1.1.1	192.168.2.5
Oct 24, 2024 18:16:25.990649939 CEST	53	61689	1.1.1.1	192.168.2.5
Oct 24, 2024 18:16:46.609406948 CEST	53	63117	1.1.1.1	192.168.2.5
Oct 24, 2024 18:16:49.216281891 CEST	53	65324	1.1.1.1	192.168.2.5
Oct 24, 2024 18:16:49.991005898 CEST	53	60325	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 24, 2024 18:15:51.726620913 CEST	192.168.2.5	1.1.1.1	c276	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 24, 2024 18:15:49.027374029 CEST	192.168.2.5	1.1.1.1	0x9f53	Standard query (0)	na2.docusign.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:15:49.027570009 CEST	192.168.2.5	1.1.1.1	0x1518	Standard query (0)	na2.docusign.net	65	IN (0x0001)	false
Oct 24, 2024 18:15:50.479496002 CEST	192.168.2.5	1.1.1.1	0xe202	Standard query (0)	docucdn-a.akamaihd.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:15:50.479784966 CEST	192.168.2.5	1.1.1.1	0x8c4d	Standard query (0)	docucdn-a.akamaihd.net	65	IN (0x0001)	false
Oct 24, 2024 18:15:50.625246048 CEST	192.168.2.5	1.1.1.1	0xcf18	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:15:50.625441074 CEST	192.168.2.5	1.1.1.1	0x4982	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 24, 2024 18:15:51.695349932 CEST	192.168.2.5	1.1.1.1	0xda32	Standard query (0)	docucdn-a.akamaihd.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:15:51.695549965 CEST	192.168.2.5	1.1.1.1	0x1401	Standard query (0)	docucdn-a.akamaihd.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 24, 2024 18:15:49.407205105 CEST	1.1.1.1	192.168.2.5	0x1518	No error (0)	na2.docusign.net	na2.docusign.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:15:49.425626993 CEST	1.1.1.1	192.168.2.5	0x9f53	No error (0)	na2.docusign.net	na2.docusign.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:15:50.488409042 CEST	1.1.1.1	192.168.2.5	0x8c4d	No error (0)	docucdn-a.akamaihd.net	docucdn-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:15:50.489470959 CEST	1.1.1.1	192.168.2.5	0xe202	No error (0)	docucdn-a.akamaihd.net	docucdn-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:15:50.632576942 CEST	1.1.1.1	192.168.2.5	0xcf18	No error (0)	www.google.com		172.217.16.196	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:15:50.633605957 CEST	1.1.1.1	192.168.2.5	0x4982	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 18:15:51.703963041 CEST	1.1.1.1	192.168.2.5	0xda32	No error (0)	docucdn-a.akamaihd.net	docucdn-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:15:51.726537943 CEST	1.1.1.1	192.168.2.5	0x1401	No error (0)	docucdn-a.akamaihd.net	docucdn-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.azureedge.net

fs.microsoft.com

slscr.update.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.5	49712	40.126.32.74	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:36 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-10-24 16:15:36 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-24 16:15:37 UTC	653	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 24 Oct 2024 16:14:37 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" FdrTelemetry: &481=21&59=33&213=10&215=0&315=1&215=0&315=1&214=56&288=16.0.30389.5 Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C558_SN1 x-ms-request-id: 91719540-4afc-41e0-965b-02ad6bc1c7c1 PPServer: PPV: 30 H: SN1PEPF00040188 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 24 Oct 2024 16:15:36 GMT Connection: close Content-Length: 11392
2024-10-24 16:15:37 UTC	11392	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.5	49713	40.126.32.74	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:39 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-10-24 16:15:39 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-24 16:15:39 UTC	653	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 24 Oct 2024 16:14:39 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" FdrTelemetry: &481=21&59=33&213=10&215=0&315=1&215=0&315=1&214=56&288=16.0.30389.5 Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C558_SN1 x-ms-request-id: 7ee6fbb5-13ef-4ea6-b94a-35850e064c2d PPServer: PPV: 30 H: SN1PEPF0004018A V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 24 Oct 2024 16:15:39 GMT Connection: close Content-Length: 11392
2024-10-24 16:15:39 UTC	11392	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.5	49715	40.126.32.74	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:44 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4694 Host: login.live.com
2024-10-24 16:15:44 UTC	4694	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-24 16:15:45 UTC	656	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 24 Oct 2024 16:14:44 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" FdrTelemetry: &481=21&59=5&213=280810&215=0&315=1&215=0&315=1&214=30&288=16.0.30389.5 Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C558_SN1 x-ms-request-id: e6c14dee-133b-436a-a7be-8072f69615f7 PPServer: PPV: 30 H: SN1PEPF0002FA75 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 24 Oct 2024 16:15:44 GMT Connection: close Content-Length: 10901
2024-10-24 16:15:45 UTC	10901	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.5	49716	40.126.32.133	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:44 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-10-24 16:15:44 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-24 16:15:44 UTC	568	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 24 Oct 2024 16:14:44 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C555_BAY x-ms-request-id: 932b9c98-77f6-4975-966b-35c28c57f8e5 PPServer: PPV: 30 H: PH1PEPF0001B735 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 24 Oct 2024 16:15:44 GMT Connection: close Content-Length: 1918
2024-10-24 16:15:44 UTC	1918	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.5	49718	40.126.32.74	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:46 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4694 Host: login.live.com
2024-10-24 16:15:46 UTC	4694	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-24 16:15:46 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 24 Oct 2024 16:14:46 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C558_SN1 x-ms-request-id: 4eb3db61-ed20-411c-8dae-28308a645f3f PPServer: PPV: 30 H: SN1PEPF0002FA75 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 24 Oct 2024 16:15:45 GMT Connection: close Content-Length: 10901
2024-10-24 16:15:46 UTC	10901	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.5	49719	40.126.32.133	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:46 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-10-24 16:15:46 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-24 16:15:47 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 24 Oct 2024 16:14:47 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C558_SN1 x-ms-request-id: 0bea0275-5bf7-48e7-9080-cd4121a9af40 PPServer: PPV: 30 H: SN1PEPF0003F95D V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 24 Oct 2024 16:15:47 GMT Connection: close Content-Length: 11412
2024-10-24 16:15:47 UTC	11412	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.5	49723	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:49 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 79 6c 2b 33 50 5a 4a 6d 2f 6b 36 4e 6a 49 67 71 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 30 36 30 63 38 34 32 34 62 39 62 38 33 66 39 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: yl+3PZJm/k6NjIgq.1Context: 2060c8424b9b83f9
2024-10-24 16:15:49 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-24 16:15:49 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 79 6c 2b 33 50 5a 4a 6d 2f 6b 36 4e 6a 49 67 71 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 30 36 30 63 38 34 32 34 62 39 62 38 33 66 39 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 4b 4d 54 6b 63 62 50 42 62 6d 56 36 63 47 67 76 38 6b 75 56 4a 66 39 44 76 6c 6c 73 33 77 30 79 30 52 4a 63 6c 49 55 32 54 39 61 4a 55 6d 4b 4e 59 78 6a 30 56 64 39 39 31 33 54 79 44 37 31 41 75 2f 49 71 67 62 42 38 47 55 4f 4f 74 42 65 67 4c 43 4e 4a 5a 6a 31 52 48 30 57 53 37 77 71 6a 34 34 36 39 4e 65 44 52 4b 59 2b 6c Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: yl+3PZJm/k6NjIgq.2Context: 2060c8424b9b83f9<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVKMTkcbPBbmV6cGgv8kuVJf9Dvlls3w0y0RJclIU2T9aJUmKNYxj0Vd9913TyD71Au/IqgbB8GUOOtBegLCNJZj1RH0WS7wqj4469NeDRKY+l
2024-10-24 16:15:49 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 79 6c 2b 33 50 5a 4a 6d 2f 6b 36 4e 6a 49 67 71 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 30 36 30 63 38 34 32 34 62 39 62 38 33 66 39 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: yl+3PZJm/k6NjIgq.3Context: 2060c8424b9b83f9
2024-10-24 16:15:49 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-24 16:15:49 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 43 56 70 66 45 51 6b 5a 54 45 4f 4a 62 56 48 74 67 70 4c 48 61 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: CVpfEQkZTEOJbVHtgpLHaQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.5	49724	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:49 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 46 4a 38 35 73 2b 4a 50 63 55 71 77 62 6b 48 4c 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 64 65 32 62 64 34 36 37 63 35 32 66 65 33 37 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: FJ85s+JPcUqwbkHL.1Context: bde2bd467c52fe37
2024-10-24 16:15:49 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-24 16:15:49 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 46 4a 38 35 73 2b 4a 50 63 55 71 77 62 6b 48 4c 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 64 65 32 62 64 34 36 37 63 35 32 66 65 33 37 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 4b 4d 54 6b 63 62 50 42 62 6d 56 36 63 47 67 76 38 6b 75 56 4a 66 39 44 76 6c 6c 73 33 77 30 79 30 52 4a 63 6c 49 55 32 54 39 61 4a 55 6d 4b 4e 59 78 6a 30 56 64 39 39 31 33 54 79 44 37 31 41 75 2f 49 71 67 62 42 38 47 55 4f 4f 74 42 65 67 4c 43 4e 4a 5a 6a 31 52 48 30 57 53 37 77 71 6a 34 34 36 39 4e 65 44 52 4b 59 2b 6c Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: FJ85s+JPcUqwbkHL.2Context: bde2bd467c52fe37<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVKMTkcbPBbmV6cGgv8kuVJf9Dvlls3w0y0RJclIU2T9aJUmKNYxj0Vd9913TyD71Au/IqgbB8GUOOtBegLCNJZj1RH0WS7wqj4469NeDRKY+l
2024-10-24 16:15:49 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 46 4a 38 35 73 2b 4a 50 63 55 71 77 62 6b 48 4c 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 64 65 32 62 64 34 36 37 63 35 32 66 65 33 37 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: FJ85s+JPcUqwbkHL.3Context: bde2bd467c52fe37<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-24 16:15:49 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-24 16:15:49 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 4e 77 70 37 2b 37 76 51 74 55 79 4a 4e 56 66 2b 43 50 59 65 46 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: Nwp7+7vQtUyJNVf+CPYeFA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.5	49727	40.126.32.133	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:49 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-10-24 16:15:49 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-24 16:15:50 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 24 Oct 2024 16:14:49 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C558_BAY x-ms-request-id: 9e42078c-6907-49e6-98d7-111fb081036a PPServer: PPV: 30 H: PH1PEPF00018BE1 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 24 Oct 2024 16:15:49 GMT Connection: close Content-Length: 11412
2024-10-24 16:15:50 UTC	11412	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49735	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:52 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 16:15:52 UTC	465	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF4C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=1740 Date: Thu, 24 Oct 2024 16:15:52 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.5	49737	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:52 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:15:53 UTC	540	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:15:52 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 23 Oct 2024 06:30:03 GMT ETag: "0x8DCF32C20D7262E" x-ms-request-id: 39f98116-901e-0015-0fb5-25b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161552Z-r1755647c66z4pt7cv1pnqayy400000009z0000000008rs4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:15:53 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-24 16:15:53 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-24 16:15:53 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-24 16:15:53 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-24 16:15:53 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-24 16:15:53 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-24 16:15:53 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-24 16:15:53 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-24 16:15:54 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-24 16:15:54 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49738	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:53 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 16:15:54 UTC	513	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=1825 Date: Thu, 24 Oct 2024 16:15:53 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-24 16:15:54 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.5	49739	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:54 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 50 42 42 6e 74 63 6c 7a 41 30 53 2f 65 65 4b 6a 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 64 31 66 62 38 64 34 61 65 31 34 39 37 32 31 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: PBBntclzA0S/eeKj.1Context: 3d1fb8d4ae149721
2024-10-24 16:15:54 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-24 16:15:54 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 50 42 42 6e 74 63 6c 7a 41 30 53 2f 65 65 4b 6a 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 64 31 66 62 38 64 34 61 65 31 34 39 37 32 31 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 4b 4d 54 6b 63 62 50 42 62 6d 56 36 63 47 67 76 38 6b 75 56 4a 66 39 44 76 6c 6c 73 33 77 30 79 30 52 4a 63 6c 49 55 32 54 39 61 4a 55 6d 4b 4e 59 78 6a 30 56 64 39 39 31 33 54 79 44 37 31 41 75 2f 49 71 67 62 42 38 47 55 4f 4f 74 42 65 67 4c 43 4e 4a 5a 6a 31 52 48 30 57 53 37 77 71 6a 34 34 36 39 4e 65 44 52 4b 59 2b 6c Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: PBBntclzA0S/eeKj.2Context: 3d1fb8d4ae149721<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVKMTkcbPBbmV6cGgv8kuVJf9Dvlls3w0y0RJclIU2T9aJUmKNYxj0Vd9913TyD71Au/IqgbB8GUOOtBegLCNJZj1RH0WS7wqj4469NeDRKY+l
2024-10-24 16:15:54 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 50 42 42 6e 74 63 6c 7a 41 30 53 2f 65 65 4b 6a 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 64 31 66 62 38 64 34 61 65 31 34 39 37 32 31 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: PBBntclzA0S/eeKj.3Context: 3d1fb8d4ae149721
2024-10-24 16:15:54 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-24 16:15:54 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 51 61 6a 41 71 64 2b 5a 6f 30 43 38 48 49 2f 4c 46 5a 39 59 51 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: QajAqd+Zo0C8HI/LFZ9YQQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49740	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:54 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 6d 45 54 31 47 33 6f 68 2f 6b 61 54 54 4e 72 41 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 66 34 64 30 33 35 37 61 35 37 33 66 38 39 36 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: mET1G3oh/kaTTNrA.1Context: ff4d0357a573f896
2024-10-24 16:15:54 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-24 16:15:54 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 6d 45 54 31 47 33 6f 68 2f 6b 61 54 54 4e 72 41 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 66 34 64 30 33 35 37 61 35 37 33 66 38 39 36 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 4b 4d 54 6b 63 62 50 42 62 6d 56 36 63 47 67 76 38 6b 75 56 4a 66 39 44 76 6c 6c 73 33 77 30 79 30 52 4a 63 6c 49 55 32 54 39 61 4a 55 6d 4b 4e 59 78 6a 30 56 64 39 39 31 33 54 79 44 37 31 41 75 2f 49 71 67 62 42 38 47 55 4f 4f 74 42 65 67 4c 43 4e 4a 5a 6a 31 52 48 30 57 53 37 77 71 6a 34 34 36 39 4e 65 44 52 4b 59 2b 6c Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: mET1G3oh/kaTTNrA.2Context: ff4d0357a573f896<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVKMTkcbPBbmV6cGgv8kuVJf9Dvlls3w0y0RJclIU2T9aJUmKNYxj0Vd9913TyD71Au/IqgbB8GUOOtBegLCNJZj1RH0WS7wqj4469NeDRKY+l
2024-10-24 16:15:54 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 6d 45 54 31 47 33 6f 68 2f 6b 61 54 54 4e 72 41 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 66 34 64 30 33 35 37 61 35 37 33 66 38 39 36 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: mET1G3oh/kaTTNrA.3Context: ff4d0357a573f896<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-24 16:15:54 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-24 16:15:54 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 30 59 53 48 69 49 74 52 2b 6b 75 4c 6f 68 4a 6a 45 35 45 57 39 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 0YSHiItR+kuLohJjE5EW9g.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.5	49744	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:55 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:15:55 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:15:55 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161555Z-r1755647c66l72xfkr6ug378ks00000008ug000000007pc4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:15:55 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.5	49741	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:55 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:15:55 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:15:55 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 77f74883-b01e-0001-1a50-2346e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161555Z-17fbfdc98bbqc8zsbguzmabx6800000007bg000000009epa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:15:55 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.5	49743	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:55 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:15:55 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:15:55 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 3b262095-501e-0035-475d-23c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161555Z-17fbfdc98bbndwgn5b4pg7s8bs00000007dg000000007kd9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:15:55 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49745	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:55 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:15:55 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:15:55 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 014e5f85-701e-006f-2b35-21afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161555Z-r1755647c66sn7s9kfw6gzvyp00000000a300000000016xg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:15:55 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49742	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:55 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:15:55 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:15:55 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 509f9858-c01e-00a2-4459-232327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161555Z-17fbfdc98bbndwgn5b4pg7s8bs00000007h0000000002pzh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:15:55 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49746	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:56 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:15:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:15:56 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: e3ea90ed-d01e-0028-6059-237896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161556Z-17fbfdc98bbvcvlzx1n0fduhm000000007hg00000000b69b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:15:56 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49748	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:56 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:15:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:15:56 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: ad393351-301e-0099-6d59-236683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161556Z-17fbfdc98bb2fzn810kvcg2zng00000007gg00000000bwpq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:15:56 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49749	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:56 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:15:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:15:56 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 8d314a1c-701e-0097-3ae5-21b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161556Z-r1755647c66tmf6g4720xfpwpn0000000as0000000007u5q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:15:56 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49747	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:56 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:15:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:15:56 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: f6e64d82-401e-0029-2a5d-239b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161556Z-17fbfdc98bblptj7fr9s141cpc00000007mg0000000022ce x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:15:56 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49750	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:56 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:15:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:15:56 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: fbb8ce34-501e-0064-0cbd-201f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161556Z-r1755647c66xrxq4nv7upygh4s00000003m0000000000bf5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:15:56 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49751	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:57 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:15:57 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:15:57 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 20eafa8b-401e-0067-4901-2009c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161557Z-r1755647c66hbclz9tgqkaxg2w00000000v0000000006f56 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:15:57 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	49752	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:57 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:15:57 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:15:57 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 13862abc-a01e-0053-5aa2-218603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161557Z-17fbfdc98bb6j78ntkx6e2fx4c00000007f0000000005vg4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:15:57 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	49753	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:57 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:15:57 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:15:57 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1b2fb3ba-201e-0033-65ce-20b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161557Z-r1755647c66dj7986akr8tvaw400000009b0000000000png x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:15:57 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.5	49754	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:57 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:15:57 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:15:57 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 48cb304a-401e-0064-7764-2354af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161557Z-17fbfdc98bb75b2fuh11781a0n00000007d0000000008x4t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:15:57 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49755	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:57 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:15:57 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:15:57 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: a95f3241-e01e-0020-1c5d-23de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161557Z-17fbfdc98bb2fzn810kvcg2zng00000007q0000000004bma x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:15:57 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49756	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:58 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=uedUl21vE9xmPSH&MD=WHYpbmRH HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-24 16:15:58 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: be1802c2-35a2-442f-b1ff-96dc2b1f8fb9 MS-RequestId: 66b52569-baf3-44f7-918a-3c5e5d698f7a MS-CV: t6ruMu9rwkmJ4ZUa.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 24 Oct 2024 16:15:58 GMT Connection: close Content-Length: 24490
2024-10-24 16:15:58 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-24 16:15:58 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49759	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:58 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:15:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:15:58 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 3edebaab-e01e-0033-21c8-214695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161558Z-r1755647c66h2wzt2z0cr0zc74000000045g000000004a3f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:15:58 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49758	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:58 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:15:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:15:58 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: fe83e199-601e-00ab-415a-2366f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161558Z-17fbfdc98bbngfjxtncsq24exs00000000wg000000009rep x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:15:58 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49760	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:58 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:15:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:15:58 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 4cd68789-d01e-0017-448e-21b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161558Z-r1755647c66h2wzt2z0cr0zc740000000420000000009neb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:15:58 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49762	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:58 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:15:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:15:58 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 1c1a6b29-f01e-0096-0e50-2310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161558Z-r1755647c66lljn2k9s29ch9ts00000009w000000000c6cs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:15:58 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49761	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:58 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:15:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:15:58 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: c30aac03-701e-0098-3e64-23395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161558Z-17fbfdc98bbp4fvlbnh222662800000000ng0000000005ur x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:15:58 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	49764	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:59 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:15:59 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:15:59 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: a019224c-501e-0047-645d-23ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161559Z-17fbfdc98bb94gkbvedtsa5ef400000007g0000000009w6q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:15:59 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49765	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:59 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:15:59 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:15:59 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: e2670bef-801e-008f-375d-232c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161559Z-17fbfdc98bbczcjda6v8hpct4c000000015000000000978a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:15:59 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49766	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:59 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:15:59 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:15:59 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: b93710ac-501e-007b-525a-235ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161559Z-17fbfdc98bbnpjstwqrbe0re7n00000007eg0000000078k9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:15:59 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49767	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:59 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:15:59 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:15:59 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 8ee7b399-e01e-0033-0c50-234695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161559Z-17fbfdc98bb94gkbvedtsa5ef400000007fg00000000azg9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:15:59 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49768	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:59 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:15:59 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:15:59 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 393bb9bf-001e-0028-2805-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161559Z-r1755647c66x46wg1q56tyyk68000000095000000000b69v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:15:59 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49769	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:00 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:00 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 6ff76e76-001e-002b-21c5-2099f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161600Z-r1755647c66prnf6k99z0m3kzc0000000a2g000000002ycc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:00 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49770	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:00 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:00 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 3cf1b782-701e-0001-32e5-21b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161600Z-r1755647c66dj7986akr8tvaw4000000097g000000006vvu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:00 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49771	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:00 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:00 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 58585528-701e-000d-4f7a-236de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161600Z-17fbfdc98bbn5xh71qanksxprn00000007q0000000005076 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:00 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49773	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:00 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:00 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 265f42d2-801e-0047-38c8-207265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161600Z-r1755647c66h2wzt2z0cr0zc74000000042g000000008zq7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:00 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49772	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:00 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:00 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 346ac1b5-f01e-003f-6ed5-20d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161600Z-r1755647c66c9glmgg3prd89mn00000009wg00000000c8sx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:00 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	49774	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:01 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:01 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 9e0e1983-701e-003e-2856-2379b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161601Z-r1755647c66h2wzt2z0cr0zc74000000041g00000000acfh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:01 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49775	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:01 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:01 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 5fe4afb9-d01e-008e-4659-23387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161601Z-17fbfdc98bbwj6cp6df5812g4s00000000v0000000005m48 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:01 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	49778	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:01 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:01 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: efc778c0-f01e-0052-4de5-219224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161601Z-r1755647c66m4jttnz6nb8kzng00000008gg000000004x4k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:01 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	49776	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:01 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:01 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 46af3d48-701e-0032-6627-21a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161601Z-r1755647c66ldfgxa3qp9d53us00000009wg00000000butn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:01 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49777	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:01 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:01 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 319a90d3-d01e-0066-4138-21ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161601Z-r1755647c66x46wg1q56tyyk68000000099g0000000049x7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:01 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49779	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:01 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:01 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 25f4145c-101e-005a-559b-24882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161601Z-r1755647c66h2wzt2z0cr0zc74000000046g0000000021dm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:02 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49780	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:02 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:01 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 95a4abee-901e-0016-6e50-23efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161601Z-17fbfdc98bbvcvlzx1n0fduhm000000007rg0000000022ff x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:02 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49781	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:02 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:02 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: d9d4df84-d01e-00ad-0964-23e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161602Z-17fbfdc98bb8xnvm6t4x6ec5m400000007eg000000003qq4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:02 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49782	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:02 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:02 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: f5c3fbe0-b01e-0002-646f-231b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161602Z-17fbfdc98bbvf2fnx6t6w0g25n00000007p0000000004cry x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:02 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49783	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:02 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:02 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 0c1e413e-701e-0021-5e50-233d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161602Z-17fbfdc98bbn5xh71qanksxprn00000007q0000000005099 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:02 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49784	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:02 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:02 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 3589f4cc-c01e-0079-731b-24e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161602Z-r1755647c66nfj7t97c2qyh6zg00000006y0000000000fc1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:03 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49785	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:02 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:02 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 1bb7fc0c-c01e-0046-7759-232db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161602Z-17fbfdc98bblfj7gw4f18guu2800000000s0000000005ufc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:03 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.5	49786	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:02 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:03 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 7a637aca-b01e-0002-3c05-221b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161603Z-r1755647c66h2wzt2z0cr0zc74000000040g00000000cnm5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:03 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49787	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:02 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:03 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: b6b4fe6b-401e-008c-805d-2386c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161603Z-17fbfdc98bbl89flqtm21qm6rn00000007h000000000af73 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:03 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	49788	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:03 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:03 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: b92258e0-a01e-00ab-2aab-219106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161603Z-r1755647c669hnl7dkxy835cqc00000007qg000000009mxu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:03 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49789	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:03 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:03 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 71d2c1fc-001e-00a2-01de-21d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161603Z-r1755647c66sn7s9kfw6gzvyp000000009z0000000008htw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:03 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49790	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:03 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:03 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 250cc9c1-301e-000c-4ec3-20323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161603Z-r1755647c66gb86l6k27ha2m1c00000008b000000000cpm0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:03 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49791	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:03 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:04 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:03 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 2653a72e-001e-005a-26e6-21c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161603Z-r1755647c66mgrw7zd8m1pn55000000008dg000000009grc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:04 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	49792	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:03 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:04 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:03 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 34cbbb6f-001e-0046-0fdf-25da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161603Z-17fbfdc98bblfj7gw4f18guu2800000000tg000000003waq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:04 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.5	49793	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:03 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:04 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:03 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: e692d532-001e-00a2-3ae7-20d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161603Z-r1755647c66gb86l6k27ha2m1c00000008gg000000004u98 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:04 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49796	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:05 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:05 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:05 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 14f65908-801e-008f-32d6-202c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161605Z-r1755647c66xkk8sn093pbsnz8000000013g000000004ttw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:05 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49795	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:05 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:05 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:05 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: ae8dc5d1-301e-006e-6f33-21f018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161605Z-r1755647c66lljn2k9s29ch9ts0000000a000000000073fh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:05 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49798	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:05 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:05 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:05 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 0f4ad09c-101e-007a-25db-20047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161605Z-r1755647c66gb86l6k27ha2m1c00000008cg00000000btwr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:05 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49797	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:05 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:05 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:05 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: f2e4413f-c01e-000b-5f59-23e255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161605Z-17fbfdc98bbwfg2nvhsr4h37pn00000007ng000000003wpk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:05 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49794	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:05 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:05 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:05 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: b6a35dc4-401e-008c-3156-2386c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161605Z-17fbfdc98bbp4fvlbnh222662800000000d00000000036p4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:05 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49800	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:06 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 66 4c 44 4d 42 78 52 30 4a 55 6d 35 2b 64 53 46 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 36 37 61 63 63 35 36 30 30 30 32 35 32 61 63 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: fLDMBxR0JUm5+dSF.1Context: e67acc56000252ac
2024-10-24 16:16:06 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-24 16:16:06 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 66 4c 44 4d 42 78 52 30 4a 55 6d 35 2b 64 53 46 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 36 37 61 63 63 35 36 30 30 30 32 35 32 61 63 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 4b 4d 54 6b 63 62 50 42 62 6d 56 36 63 47 67 76 38 6b 75 56 4a 66 39 44 76 6c 6c 73 33 77 30 79 30 52 4a 63 6c 49 55 32 54 39 61 4a 55 6d 4b 4e 59 78 6a 30 56 64 39 39 31 33 54 79 44 37 31 41 75 2f 49 71 67 62 42 38 47 55 4f 4f 74 42 65 67 4c 43 4e 4a 5a 6a 31 52 48 30 57 53 37 77 71 6a 34 34 36 39 4e 65 44 52 4b 59 2b 6c Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: fLDMBxR0JUm5+dSF.2Context: e67acc56000252ac<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVKMTkcbPBbmV6cGgv8kuVJf9Dvlls3w0y0RJclIU2T9aJUmKNYxj0Vd9913TyD71Au/IqgbB8GUOOtBegLCNJZj1RH0WS7wqj4469NeDRKY+l
2024-10-24 16:16:06 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 66 4c 44 4d 42 78 52 30 4a 55 6d 35 2b 64 53 46 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 36 37 61 63 63 35 36 30 30 30 32 35 32 61 63 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: fLDMBxR0JUm5+dSF.3Context: e67acc56000252ac<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-24 16:16:06 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-24 16:16:06 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 36 71 2f 5a 67 7a 76 38 71 45 47 67 65 39 34 52 51 41 6f 5a 69 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 6q/Zgzv8qEGge94RQAoZiQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49799	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:06 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 46 4e 38 36 6b 67 56 2b 30 45 36 54 69 41 55 59 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 64 35 34 30 33 63 30 62 30 63 62 65 33 63 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: FN86kgV+0E6TiAUY.1Context: ad5403c0b0cbe3c2
2024-10-24 16:16:06 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-24 16:16:06 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 46 4e 38 36 6b 67 56 2b 30 45 36 54 69 41 55 59 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 64 35 34 30 33 63 30 62 30 63 62 65 33 63 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 4b 4d 54 6b 63 62 50 42 62 6d 56 36 63 47 67 76 38 6b 75 56 4a 66 39 44 76 6c 6c 73 33 77 30 79 30 52 4a 63 6c 49 55 32 54 39 61 4a 55 6d 4b 4e 59 78 6a 30 56 64 39 39 31 33 54 79 44 37 31 41 75 2f 49 71 67 62 42 38 47 55 4f 4f 74 42 65 67 4c 43 4e 4a 5a 6a 31 52 48 30 57 53 37 77 71 6a 34 34 36 39 4e 65 44 52 4b 59 2b 6c Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: FN86kgV+0E6TiAUY.2Context: ad5403c0b0cbe3c2<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVKMTkcbPBbmV6cGgv8kuVJf9Dvlls3w0y0RJclIU2T9aJUmKNYxj0Vd9913TyD71Au/IqgbB8GUOOtBegLCNJZj1RH0WS7wqj4469NeDRKY+l
2024-10-24 16:16:06 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 46 4e 38 36 6b 67 56 2b 30 45 36 54 69 41 55 59 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 64 35 34 30 33 63 30 62 30 63 62 65 33 63 32 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: FN86kgV+0E6TiAUY.3Context: ad5403c0b0cbe3c2
2024-10-24 16:16:06 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-24 16:16:06 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 57 6a 45 48 36 53 61 55 4e 6b 57 69 69 52 36 72 4e 75 47 57 37 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: WjEH6SaUNkWiiR6rNuGW7A.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49804	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:06 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:06 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:06 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 6acd84c4-d01e-0066-15aa-20ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161606Z-r1755647c668mbb8rg8s8fbge400000006y0000000002876 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:06 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49802	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:06 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:06 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:06 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: ab84cae0-f01e-005d-23d7-2513ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161606Z-r1755647c66ldfgxa3qp9d53us00000009x000000000b25u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:06 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49801	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:06 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:06 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:06 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: cc65e471-501e-008c-15b8-20cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161606Z-r1755647c66xkk8sn093pbsnz800000001400000000047cy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:06 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49805	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:06 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:06 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:06 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 55f0c68d-501e-008f-5d50-239054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161606Z-17fbfdc98bbvwcxrk0yzwg4d5800000007eg00000000beht x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:06 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49803	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:06 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:06 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:06 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 97d7c53d-b01e-001e-2be3-200214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161606Z-r1755647c66f2zlraraf0y5hrs00000008f000000000771y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:06 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49807	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:07 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:07 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: ba028032-401e-00ac-39db-200a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161607Z-r1755647c66sn7s9kfw6gzvyp00000000a00000000007tts x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:07 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49808	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:07 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:07 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: ae9ee863-001e-000b-78d3-2015a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161607Z-r1755647c66l72xfkr6ug378ks00000008x0000000004teh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:07 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49809	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:07 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:07 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: df53dfe1-801e-0067-2856-23fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161607Z-17fbfdc98bbnpjstwqrbe0re7n00000007eg0000000078wm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:07 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49806	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:07 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:07 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 1c36e671-f01e-0096-085a-2310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161607Z-17fbfdc98bbkw9phumvsc7yy8w00000007kg000000003vzq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:07 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49810	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:07 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:07 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: e131a4b8-201e-005d-245d-23afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161607Z-17fbfdc98bbnpjstwqrbe0re7n00000007hg000000003p6w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:07 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49811	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:08 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:08 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 34547014-f01e-003f-75cc-20d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161608Z-r1755647c66xkk8sn093pbsnz80000000110000000007s9h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:08 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49812	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:08 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:08 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: ee1cea45-f01e-003f-5750-23d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161608Z-17fbfdc98bbnpjstwqrbe0re7n00000007eg0000000078xu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:08 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49814	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:08 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:08 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 0cefa6ce-701e-0097-1ce3-20b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161608Z-r1755647c66wjht63r8k9qqnrs00000008bg00000000b5yu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:08 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	49813	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:08 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:08 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 931f542e-301e-000c-75f2-21323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161608Z-r1755647c66wjht63r8k9qqnrs00000008c000000000c7eu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:08 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49815	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:08 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:08 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: fc76b70a-c01e-0034-0bf8-202af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161608Z-r1755647c66l72xfkr6ug378ks00000008xg00000000449v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:08 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49816	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:09 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:09 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:09 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 9728de04-701e-0097-2579-23b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161609Z-17fbfdc98bbh7l5skzh3rekksc00000000qg000000004u0q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:09 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49818	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:09 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:09 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d7699e86-701e-0050-405d-236767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161609Z-17fbfdc98bbvwcxrk0yzwg4d5800000007k0000000006un0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:09 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	49820	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:09 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:09 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 8414f4d3-801e-0047-1592-1f7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161609Z-r1755647c66ldfgxa3qp9d53us0000000a20000000004400 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:09 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49817	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:09 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:09 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 610ea227-401e-00ac-206b-230a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161609Z-17fbfdc98bbwfg2nvhsr4h37pn00000007h0000000008u57 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:09 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49819	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:09 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:09 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: ec87b83f-a01e-0053-3f64-238603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161609Z-17fbfdc98bbqc8zsbguzmabx6800000007h0000000000ssb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:09 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	49821	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:10 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:10 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:10 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 4aa30514-001e-0014-5150-235151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161610Z-17fbfdc98bbx648l6xmxqcmf2000000007mg000000001ekf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:10 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49824	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:10 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:10 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:10 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 9175aec4-101e-0028-2a56-238f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161610Z-17fbfdc98bbvcvlzx1n0fduhm000000007qg000000003y4b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:10 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49823	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:10 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:10 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 3ee1fb64-201e-00aa-2159-233928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161610Z-17fbfdc98bb94gkbvedtsa5ef400000007gg0000000091n7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:10 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49822	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:10 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:10 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: fd7883f4-d01e-0017-7959-23b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161610Z-r1755647c66lljn2k9s29ch9ts0000000a20000000003p04 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:10 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	49825	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:10 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:10 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:10 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 6d4b4f71-e01e-00aa-4a56-23ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161610Z-17fbfdc98bbh7l5skzh3rekksc00000000s0000000001eh2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:10 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	49826	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:11 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:11 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:11 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 639ae494-d01e-0082-069a-20e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161611Z-r1755647c66z4pt7cv1pnqayy40000000a0g000000005gnp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:11 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49827	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:11 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:11 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:11 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: d0d0f8e5-601e-000d-298c-212618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161611Z-r1755647c66x2fg5vpbex0bd8400000000qg000000007gxd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:11 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	49828	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:11 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:11 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:11 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 9f3a3312-201e-0096-7bbe-20ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161611Z-r1755647c66j878m0wkraqty3800000008gg000000004sm0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:11 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49829	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:11 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:11 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:11 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 48cb41bd-401e-0064-5c64-2354af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161611Z-17fbfdc98bblvnlh5w88rcarag00000007mg000000007hag x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:11 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49830	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:11 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:11 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:11 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: c39a1591-e01e-001f-5e5d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161611Z-17fbfdc98bbvwcxrk0yzwg4d5800000007mg000000005u70 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:11 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49833	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:12 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:12 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:12 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 44b73ccb-201e-0096-2a5d-23ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161612Z-r1755647c66k9st9tvd58z9dg80000000a0g000000005y9t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:12 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	49832	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:12 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:12 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:12 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: c4fdf5e3-f01e-0003-490d-264453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161612Z-17fbfdc98bbvvplhck7mbap4bw00000000zg000000004fay x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 16:16:12 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49834	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:12 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:12 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:12 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 6dbd05ca-401e-0078-0659-234d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161612Z-17fbfdc98bbcrtjhdvnfuyp28800000007p000000000622n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:12 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49835	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:12 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:12 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:12 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 44b68622-401e-0067-4450-2309c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161612Z-r1755647c66x2fg5vpbex0bd8400000000sg000000003wk6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:12 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	49831	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:12 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:12 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:12 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 1f9beeb1-d01e-0014-170b-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161612Z-r1755647c66fnxpdavnqahfp1w000000085g000000008hcm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:12 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	49836	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:13 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:13 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:13 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 667d1099-601e-003e-17c9-203248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161613Z-r1755647c66lljn2k9s29ch9ts00000009y000000000a5w1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:13 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	49839	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:13 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:13 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:13 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 816a6405-301e-001f-06d8-21aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161613Z-17fbfdc98bbwfg2nvhsr4h37pn00000007eg00000000c7e0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:13 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49837	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:13 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:13 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:13 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: facc6f57-201e-006e-7356-23bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161613Z-17fbfdc98bbgzrcvp7acfz2d3000000007pg0000000021ta x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:13 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49838	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:13 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:13 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:13 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: e3d367a8-d01e-0028-7850-237896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161613Z-17fbfdc98bb94gkbvedtsa5ef400000007q0000000000rkp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:13 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49840	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:13 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:13 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:13 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 31e4fe8c-301e-0033-38f2-21fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161613Z-r1755647c66kv68zfmyfrbcqzg00000008fg000000006vvg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:13 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	49841	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:13 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:14 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:14 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 2a979a5c-f01e-003f-77f7-21d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161614Z-r1755647c66m4jttnz6nb8kzng00000008m00000000000tz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:14 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	49842	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:14 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:14 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:14 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: ee1afe0a-301e-0052-2b50-2365d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161614Z-17fbfdc98bbrx2rj4asdpg8sbs00000003kg000000001a7m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:14 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49844	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:14 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:14 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:14 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 106adab5-b01e-0001-11da-2046e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161614Z-r1755647c66h2wzt2z0cr0zc74000000040g00000000cnvg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:14 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	49845	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:14 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:14 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:14 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e682fb07-001e-00a2-2ae3-20d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161614Z-r1755647c66k9st9tvd58z9dg800000009w000000000bth7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:14 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49843	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:14 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:14 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:14 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: c2ed4d23-701e-0098-0959-23395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161614Z-17fbfdc98bbvwcxrk0yzwg4d5800000007q0000000000y86 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:14 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49846	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:14 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:15 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:14 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: a2099384-101e-008d-760b-2292e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161614Z-r1755647c66n5bjpba5s4mu9d00000000a00000000006khy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:15 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49849	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:14 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:15 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:14 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 654233af-a01e-001e-0b27-2149ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161614Z-r1755647c66cdf7jx43n17haqc0000000av0000000002ayt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:15 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49848	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:14 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:15 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:15 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: d904b25e-d01e-0066-3f59-23ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161615Z-17fbfdc98bbrx2rj4asdpg8sbs00000003g0000000005w1u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:15 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	49850	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:15 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:15 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:15 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 3ed3a1a2-201e-0085-145a-2334e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161615Z-17fbfdc98bb7qlzm4x52d2225c00000007fg000000008a3s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:15 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	49847	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:15 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:15 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:15 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 4c920d0e-c01e-008d-4cca-202eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161615Z-r1755647c66ldfgxa3qp9d53us00000009zg0000000085ve x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:15 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	49851	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:15 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:15 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:15 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: fca683ae-601e-0070-466b-23a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161615Z-17fbfdc98bbgzrcvp7acfz2d3000000007hg000000007m5m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:15 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	49852	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:15 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:15 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:15 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: f0881de6-001e-002b-6759-2399f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161615Z-17fbfdc98bbkw9phumvsc7yy8w00000007dg00000000agpx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:15 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	49853	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:15 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:16 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:15 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: f36390f8-001e-00a2-0e96-1fd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161615Z-r1755647c66sn7s9kfw6gzvyp000000009zg000000008b5k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:16 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	49854	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:15 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:16 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:15 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: b9c92f65-401e-0016-1c27-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161615Z-r1755647c66z4pt7cv1pnqayy40000000a0g000000005gxd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:16 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	49855	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:15 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:16 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:15 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 9f7c1011-d01e-0065-1a3b-22b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161615Z-17fbfdc98bbvvplhck7mbap4bw00000000u000000000bsf3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:16 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	49856	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:16 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:16 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:16 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: c2bf3a2c-401e-0047-4d9c-248597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161616Z-17fbfdc98bbngfjxtncsq24exs00000000yg000000008dy6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 16:16:16 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	49857	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:16 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:16 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:16 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: c39b20d8-e01e-001f-4a5d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161616Z-r1755647c66fnxpdavnqahfp1w000000083000000000c78x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:16 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	49858	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:16 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:16 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:16 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: b71c6767-a01e-0021-3a5a-23814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161616Z-17fbfdc98bblvnlh5w88rcarag00000007kg000000009wma x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:16 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.5	49859	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:16 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:16 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:16 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: baa41b4f-401e-00ac-2c28-210a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161616Z-r1755647c66nxct5p0gnwngmx0000000099g000000003wsw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:16 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	49860	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:16 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:16 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:16 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 18096f5a-101e-000b-7a33-215e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161616Z-r1755647c66vrwbmeqw88hpesn00000009rg000000006kh9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:16 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	49861	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:17 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:17 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:17 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 2e9d796b-b01e-00ab-5859-23dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161617Z-17fbfdc98bbqc8zsbguzmabx6800000007b000000000a9wr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:17 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49863	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:17 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:17 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:17 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: b72677c2-a01e-0021-325d-23814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161617Z-17fbfdc98bbp4fvlbnh222662800000000gg00000000382s x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:17 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49862	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:17 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:17 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:17 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 728679af-d01e-007a-566c-23f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161617Z-17fbfdc98bbvwcxrk0yzwg4d5800000007k0000000006ute x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:17 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49865	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:17 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:18 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:17 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 44e5e715-301e-001f-6416-24aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161617Z-r1755647c66x7vzx9armv8e3cw00000000vg00000000apna x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:18 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49864	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:17 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:18 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:17 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 28e56280-601e-003d-4259-236f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161617Z-17fbfdc98bbgzrcvp7acfz2d3000000007pg0000000021z4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:18 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	49867	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:18 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:18 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:18 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 8b373834-501e-008c-26e4-21cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161618Z-r1755647c66cdf7jx43n17haqc0000000av0000000002b0u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:18 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	49866	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:18 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:18 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:18 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 474bc074-b01e-0002-67b0-201b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161618Z-r1755647c66wjht63r8k9qqnrs00000008e00000000095dt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:18 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	49868	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:18 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:18 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:18 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: ee3730f2-f01e-003f-725a-23d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161618Z-17fbfdc98bbgzrcvp7acfz2d3000000007q000000000115z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:18 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	49869	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:18 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:18 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:18 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 7d169aa3-d01e-0017-7930-21b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161618Z-r1755647c66z4pt7cv1pnqayy400000009zg000000007uqb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:18 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	49870	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:18 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:18 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:18 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 47247c95-c01e-00a1-575a-237e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161618Z-17fbfdc98bbg2mc9qrpn009kgs00000007rg000000001vyk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:18 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	49871	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:19 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:19 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:19 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 865bbc8c-c01e-002b-3926-216e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161619Z-r1755647c66cdf7jx43n17haqc0000000apg00000000anfd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:19 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	49872	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:19 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:19 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:19 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: ce674b06-f01e-0052-7d0b-229224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161619Z-r1755647c669hnl7dkxy835cqc00000007ng00000000cbex x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:19 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.5	49873	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:19 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:19 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:19 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 07658eab-b01e-005c-1e14-224c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161619Z-r1755647c66zs9x4962sbyaz1w0000000870000000004u8d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:19 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	49874	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:19 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:19 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:19 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: c9ef38c2-001e-002b-2fff-2599f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161619Z-r1755647c66f4bf880huw27dwc00000000ng0000000066c5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:19 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	49875	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:19 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:19 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:19 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 5fe4c9d5-d01e-008e-1959-23387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161619Z-r1755647c66cdf7jx43n17haqc0000000av0000000002b1m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:19 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	49876	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:20 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:20 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:20 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: b7d5c986-501e-005b-0250-23d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161620Z-17fbfdc98bb8xnvm6t4x6ec5m400000007cg00000000784t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:20 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	49877	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:20 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:20 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:20 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 563c5de3-c01e-0034-155d-232af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161620Z-17fbfdc98bb75b2fuh11781a0n00000007cg000000008zef x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:20 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	49878	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:20 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:20 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:20 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: ba3ed362-301e-0099-2f30-216683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161620Z-r1755647c66nxct5p0gnwngmx00000000990000000004bv6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:20 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 4324, Parent PID: 2412

General

Target ID:	0
Start time:	12:15:38
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5292, Parent PID: 4324

General

Target ID:	2
Start time:	12:15:45
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2484 --field-trial-handle=2360,i,17170980348293624299,15076630514375485401,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4024, Parent PID: 2412

General

Target ID:	3
Start time:	12:15:47
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://na2.docusign.net/member/Images/email/docInvite-white.png"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: global traffic	DNS traffic detected: DNS query: na2.docusign.net
Source: global traffic	DNS traffic detected: DNS query: docucdn-a.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.133
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.133
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.133
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.133
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.133
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.133
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.133

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://na2.docusign.net/member/Images/email/docInvite-white.png

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4324_1198034603\LICENSE

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4324_1198034603\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4324_1198034603\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4324_1198034603\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4324_1198034603\sets.json

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Windows Analysis Report
https://na2.docusign.net/member/Images/email/docInvite-white.png