Edit tour

Windows Analysis Report
https://books.zoho.com/api/v3/settings/templates/invoicelogo/2-9f5f6126fb9f5927bb890a052eb3e49c534d130e54c0d7eb3f0166cd0041c6789a3b840ec167bdeab503b1141cf436f4

Overview

General Information

Sample URL:	https://books.zoho.com/api/v3/settings/templates/invoicelogo/2-9f5f6126fb9f5927bb890a052eb3e49c534d130e54c0d7eb3f0166cd0041c6789a3b840ec167bdeab503b1141cf436f4
Analysis ID:	1542135
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Creates files inside the system directory

Detected non-DNS traffic on DNS port

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1472 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1680 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=1996,i,13365789237839253957,2226731636364892514,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2164 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://books.zoho.com/api/v3/settings/templates/invoicelogo/2-9f5f6126fb9f5927bb890a052eb3e49c534d130e54c0d7eb3f0166cd0041c6789a3b840ec167bdeab503b1141cf436f4" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

mspaint.exe (PID: 572 cmdline: mspaint.exe "C:\Users\user\Desktop\" MD5: 986A191E95952C9E3FE6BE112FB92026)

cleanup

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 3592Host: login.live.com

Source: Invoicelogo_2023-06-20_Logo_Assek_ZohoBooks240px.png.crdownload.0.dr, chromecache_124.2.dr, 0ef71b6e-a980-4dd6-9f83-df83f6561ba1.tmp.0.dr

String found in binary or memory: http://www.gimp.org/xmp/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 55040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 55063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55069
Source: unknown	Network traffic detected: HTTP traffic on port 55005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55075
Source: unknown	Network traffic detected: HTTP traffic on port 55028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55073
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55072
Source: unknown	Network traffic detected: HTTP traffic on port 54952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 54975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 54998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 55016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55084
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55083
Source: unknown	Network traffic detected: HTTP traffic on port 55051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55088
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 55086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55096
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55095
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55094
Source: unknown	Network traffic detected: HTTP traffic on port 55052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55099
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 55085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 54997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 55120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 55015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 54985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55027
Source: unknown	Network traffic detected: HTTP traffic on port 54962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55026
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55025
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55030
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55032
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 55041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 55087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55039
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55037
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55036
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55040
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55045
Source: unknown	Network traffic detected: HTTP traffic on port 55076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55044
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55043
Source: unknown	Network traffic detected: HTTP traffic on port 54974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 55042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55048
Source: unknown	Network traffic detected: HTTP traffic on port 55098 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55047
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55051
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55050
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55057
Source: unknown	Network traffic detected: HTTP traffic on port 55075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55054
Source: unknown	Network traffic detected: HTTP traffic on port 54973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 55014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 54996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55059
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55058
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55064
Source: unknown	Network traffic detected: HTTP traffic on port 55053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55062
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55068
Source: unknown	Network traffic detected: HTTP traffic on port 54951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 55107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54948
Source: unknown	Network traffic detected: HTTP traffic on port 55066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54949
Source: unknown	Network traffic detected: HTTP traffic on port 55020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54956
Source: unknown	Network traffic detected: HTTP traffic on port 55088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54950
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54952
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54960
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54966
Source: unknown	Network traffic detected: HTTP traffic on port 55099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54964
Source: unknown	Network traffic detected: HTTP traffic on port 55001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54963
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 55067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55101 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54978
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54972
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54971
Source: unknown	Network traffic detected: HTTP traffic on port 55009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54970
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54974
Source: unknown	Network traffic detected: HTTP traffic on port 54956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54980
Source: unknown	Network traffic detected: HTTP traffic on port 55058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54989
Source: unknown	Network traffic detected: HTTP traffic on port 55093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54981
Source: unknown	Network traffic detected: HTTP traffic on port 55024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54987
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54985
Source: unknown	Network traffic detected: HTTP traffic on port 55112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54991
Source: unknown	Network traffic detected: HTTP traffic on port 55082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54990
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54994
Source: unknown	Network traffic detected: HTTP traffic on port 55059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54998
Source: unknown	Network traffic detected: HTTP traffic on port 54968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54997
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54996
Source: unknown	Network traffic detected: HTTP traffic on port 55113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55107
Source: unknown	Network traffic detected: HTTP traffic on port 55025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55103
Source: unknown	Network traffic detected: HTTP traffic on port 55111 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55104
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55112
Source: unknown	Network traffic detected: HTTP traffic on port 55083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55117
Source: unknown	Network traffic detected: HTTP traffic on port 54984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55115
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55000
Source: unknown	Network traffic detected: HTTP traffic on port 55048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55005
Source: unknown	Network traffic detected: HTTP traffic on port 54949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55003
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55007
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55013
Source: unknown	Network traffic detected: HTTP traffic on port 55026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55012

Source: unknown	HTTPS traffic detected: 20.190.159.0:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.75:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.5:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.5:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.5:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.5:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.5:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.5:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.5:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.5:55042 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.5:55041 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.5:55044 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.5:55098 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.5:55121 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.5:55121 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.5:55120 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.5:55120 version: TLS 1.2

Source: C:\Windows\SysWOW64\mspaint.exe	File created: C:\Windows\Debug\WIA			Jump to behavior
Source: C:\Windows\SysWOW64\mspaint.exe	File created: C:\Windows\Debug\WIA\wiatrace.log			Jump to behavior

Source: classification engine

Classification label: clean2.win@23/12@4/4

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: C:\Windows\SysWOW64\mspaint.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=1996,i,13365789237839253957,2226731636364892514,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://books.zoho.com/api/v3/settings/templates/invoicelogo/2-9f5f6126fb9f5927bb890a052eb3e49c534d130e54c0d7eb3f0166cd0041c6789a3b840ec167bdeab503b1141cf436f4"
Source: unknown	Process created: C:\Windows\SysWOW64\mspaint.exe mspaint.exe "C:\Users\user\Desktop\"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=1996,i,13365789237839253957,2226731636364892514,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Windows\SysWOW64\mspaint.exe	Section loaded: mfc42u.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mspaint.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mspaint.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mspaint.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mspaint.exe	Section loaded: msftedit.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mspaint.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mspaint.exe	Section loaded: uiribbon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mspaint.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mspaint.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mspaint.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mspaint.exe	Section loaded: efswrt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mspaint.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mspaint.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mspaint.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mspaint.exe	Section loaded: sti.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mspaint.exe	Section loaded: wiatrace.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mspaint.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mspaint.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mspaint.exe	Section loaded: windowscodecs.dll	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Windows\SysWOW64\mspaint.exe

File opened: C:\Windows\SysWOW64\MSFTEDIT.DLL

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Windows\SysWOW64\mspaint.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mspaint.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mspaint.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mspaint.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Windows\SysWOW64\mspaint.exe

Process information queried: ProcessInformation

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 DLL Side-Loading	1 Process Injection	11 Masquerading	OS Credential Dumping	1 Process Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 DLL Side-Loading	1 Process Injection	LSASS Memory	1 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 Registry Run Keys / Startup Folder	1 DLL Side-Loading	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://www.gimp.org/xmp/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
books.zoho.com	204.141.42.145	true	false		unknown
www.google.com	142.250.186.164	true	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://books.zoho.com/api/v3/settings/templates/invoicelogo/2-9f5f6126fb9f5927bb890a052eb3e49c534d130e54c0d7eb3f0166cd0041c6789a3b840ec167bdeab503b1141cf436f4	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.gimp.org/xmp/	Invoicelogo_2023-06-20_Logo_Assek_ZohoBooks240px.png.crdownload.0.dr, chromecache_124.2.dr, 0ef71b6e-a980-4dd6-9f83-df83f6561ba1.tmp.0.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
204.141.42.145	books.zoho.com	United States	2639	ZOHO-ASUS	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1542135
Start date and time:	2024-10-25 15:34:53 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 21s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://books.zoho.com/api/v3/settings/templates/invoicelogo/2-9f5f6126fb9f5927bb890a052eb3e49c534d130e54c0d7eb3f0166cd0041c6789a3b840ec167bdeab503b1141cf436f4
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@23/12@4/4

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 192.229.221.95, 142.250.181.227, 142.250.185.110, 173.194.76.84, 88.221.110.91, 34.104.35.123, 52.165.164.15, 20.242.39.171, 2.16.100.168, 142.250.185.99
Excluded domains from analysis (whitelisted): client.wns.windows.com, fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, login.live.com, glb.cws.prod.dcat.dsp.trafficmanager.net, update.googleapis.com, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://books.zoho.com/api/v3/settings/templates/invoicelogo/2-9f5f6126fb9f5927bb890a052eb3e49c534d130e54c0d7eb3f0166cd0041c6789a3b840ec167bdeab503b1141cf436f4

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 25 12:36:03 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9709589585809564
Encrypted:	false
SSDEEP:	48:8NnKdKITqM9j9HfidAKZdA19ehwiZUklqeh1y+3:8NnQLjfyy
MD5:	87B826BABBC377FB30FD1856B3417560
SHA1:	8A1D62F5E8371419549DB195E383E5D553A2ECF7
SHA-256:	D0514D81EC499986241B1FF5279833CD217E7B05C3A21B1348F85EC763774D29
SHA-512:	AE0934B841A7F7078660E3532E64FB3574172DFE8DBB9C0868177519EAB8F4D4DEBD31AB114FFD28606E667C5B1C36635AE78A4019E8DE0003CDFAC12F24DC2A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......s..&..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IYY.l....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VYY.l....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VYY.l....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VYY.l..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VYY.l...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........+9sm.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 25 12:36:03 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.98166219146361
Encrypted:	false
SSDEEP:	48:8vdKITqM9j9HfidAKZdA1weh/iZUkAQkqehiy+2:8vLjl9Qvy
MD5:	9327484D74D1AC57B225892ED62812E3
SHA1:	940EFC0933B6E23D21309AF9E1B51C930207C9F7
SHA-256:	E14DDE535E09F47E3C3AEE61E4F386E312A73A217DB895116D107F1DEEBE8001
SHA-512:	CBC18C02AF357669D35E6C79A918F21820F6ECC26DD2235C913E29C51408438DE31169A6ADEE605A3182681E4FA4F1343A6E20E8FF7E0D784AE076A0A7999B13
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....-e..&..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IYY.l....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VYY.l....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VYY.l....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VYY.l..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VYY.l...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........+9sm.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	3.99913384749442
Encrypted:	false
SSDEEP:	48:8xKdKITqM9jsHfidAKZdA14tseh7sFiZUkmgqeh7s8y+BX:8xQLjSney
MD5:	6220B75434AFF4B96066CEED73B0D570
SHA1:	A80ADBB9E10838E26293F47BEA587802928BDCFA
SHA-256:	A98ED80B24F4B601F677F1A81D82D08F129AE215D11098E9CCBF47E7CD969FDB
SHA-512:	E6BB6653E8D11901947DB0038144B5475C7AA3AD519926253994FD5B9A60DB29C7342CB9E9F237FC2A8E9346FC1ED2DA48366A23164C7CC712FDC9828D78DCE0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IYY.l....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VYY.l....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VYY.l....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VYY.l..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........+9sm.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 25 12:36:03 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9860460914176388
Encrypted:	false
SSDEEP:	48:8VedKITqM9j9HfidAKZdA1vehDiZUkwqehWy+R:8KLjmUy
MD5:	DEA3378D8921D86F2E5AD16EE83860A6
SHA1:	C8DC3853D7BAAC9A8500BF60AB5CB1D45E7E8F5B
SHA-256:	008052A3FD490F6D4EC2B101481A5F803FE9F237BEAA3C24F6D47F7967C0C3C1
SHA-512:	5E40711F37EBBE5F3BBDEA2040BDE897C976A41D8447A8066E8F6113E95DCB449850C51BAAC967CDDC9D26033314A119032248101A4E59A0198550DFF330601B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......`..&..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IYY.l....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VYY.l....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VYY.l....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VYY.l..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VYY.l...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........+9sm.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 25 12:36:03 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9712488196645044
Encrypted:	false
SSDEEP:	48:8vdKITqM9j9HfidAKZdA1hehBiZUk1W1qehYy+C:8vLjm94y
MD5:	97E8AF3F610322941133598AE9051902
SHA1:	C9F423FE219803456DA09057F1EE97DBBB8BF3E7
SHA-256:	C95209081A250031F30062235F35665BFF7FEC74AFDC180FB1C310B15AD83D84
SHA-512:	D633AEF08CD0151B67E9EBC87A8D28E85B12D0CF9373B3E7388CFFB88A4C494EA79C44DC675E16D42F49785043D04BC721C0C4AA65844244C30B64C110D5DD7F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......k..&..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IYY.l....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VYY.l....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VYY.l....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VYY.l..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VYY.l...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........+9sm.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 25 12:36:03 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9815193531184057
Encrypted:	false
SSDEEP:	48:8XnKdKITqM9j9HfidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbey+yT+:8XQLj4T/TbxWOvTbey7T
MD5:	BCA6030BB4E83208860DC6EBCD05D7D9
SHA1:	B6EB9B353A20487F076E2F0C59E6F6902C10B6F3
SHA-256:	F82F3F4A3C9D4F4BB577E77C30C32EBDA24FDE15C492CD811A05DA0411D83877
SHA-512:	CAF14F4FE965BED428A705C295EB505FB4321150F6622DEE167B1BE1EA4F3733502E8D96E7C0A33CF75E5EA34A74A7909D2F6F3610C337A32A02D87A4B6D977B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...../W..&..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IYY.l....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VYY.l....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VYY.l....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VYY.l..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VYY.l...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........+9sm.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\Downloads\0ef71b6e-a980-4dd6-9f83-df83f6561ba1.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 340 x 122, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15670
Entropy (8bit):	7.3821470808009595
Encrypted:	false
SSDEEP:	384:Hu8qBxAZAbk3MfKDQJmSREbWLCAUQH/zOIB12/5w:Hu8qBx8Abk3IgjwEbWt1A/5w
MD5:	BDEF046EDFA56537BFF60443E970D6CC
SHA1:	AD7B7022DEF47586AE8DD53D05D3950B0FFBF37B
SHA-256:	6FCD008093609B7ED12F3D2943B6BA6E1A99D7EF8E8DC4972CF6949D9847C060
SHA-512:	203B6C01E493AFCD5674864892538371581E23C67D7D2F9CF3BE9AD3794F2B819616A53C39D49933FAD777620D109BE97E992D15808985FC6D87A6583EB7B1FD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...T...z......C.G...nzTXtRaw profile type exif..x..Yr-9.].1....;0..f.........\|i.T..I..D..............R.6.6.".u.'?...1..).......O....\|..)......n?........4..........?..{......hE......J..C....]......u.....'......<..........i..\|K*......._B..._si.0.9K-......?...n...Z..E....~.[...:.=[5....-......}H..._.\..O....,...../.....].j..~7.g..O...U...f...q..>......;.>w.)...j:i....}...k.!;?.s.~..wQ..>..^F9.........Z.w..w....I.4'..x......7..VHI.l....Y.f....22..oP...?...P^..l..Zd...s....A..%.......L~~/@..uc1tCMd-..,E..S"...M..K.....a...b.g..x.^.[....fd.._NnF.$..F.x...l...5o..6.X.ffn....k......^z.[....s.Q..6l..c.9....wO^0....ZX.\|.5....m...{.\|..?..?..3o....].~..w>J...k.....e.7....?.Z..Z.2..._Y......'M9#a9.D.])...r.{.5+s.Y.....".rv.2F..M...'w!.dT....[..oy.....J............./c?]...B....YN.;...Z..$..j..F......k.._<..e..6t...)...<....g^.......{.S.{4..=...._'5B....\$..\|@.i..<.y.N...`+....l6.N:....s.2....B^F..6z.+.}.........^.ll.J....2.'/...c.$

C:\Users\user\Downloads\Invoicelogo_2023-06-20_Logo_Assek_ZohoBooks240px.png (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 340 x 122, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	27357
Entropy (8bit):	7.710470388735066
Encrypted:	false
SSDEEP:	768:Hu8qBx8Abk3IgjwEbWt1A/5/s6kM5LrY/:Hq/V2Ig8GWLA/mM5Q/
MD5:	97220B0DBF1FC03923E35E656A44D53B
SHA1:	E73C73A9FF61427ED8C3B2DE3C027EEF0927EB65
SHA-256:	28A84C98EBF701E17B409174D5215CA1D3DD2026E709A40C8F84683CA634E20F
SHA-512:	C26EAB3932690D0E3987148FD17902A226582E0B1FE47B7AD6D094532C85EA90E16436437B2EA4E80D04C292301DEC9E092F6DDE3152DA7BD0D65A9F08355002
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...T...z......C.G...nzTXtRaw profile type exif..x..Yr-9.].1....;0..f.........\|i.T..I..D..............R.6.6.".u.'?...1..).......O....\|..)......n?........4..........?..{......hE......J..C....]......u.....'......<..........i..\|K*......._B..._si.0.9K-......?...n...Z..E....~.[...:.=[5....-......}H..._.\..O....,...../.....].j..~7.g..O...U...f...q..>......;.>w.)...j:i....}...k.!;?.s.~..wQ..>..^F9.........Z.w..w....I.4'..x......7..VHI.l....Y.f....22..oP...?...P^..l..Zd...s....A..%.......L~~/@..uc1tCMd-..,E..S"...M..K.....a...b.g..x.^.[....fd.._NnF.$..F.x...l...5o..6.X.ffn....k......^z.[....s.Q..6l..c.9....wO^0....ZX.\|.5....m...{.\|..?..?..3o....].~..w>J...k.....e.7....?.Z..Z.2..._Y......'M9#a9.D.])...r.{.5+s.Y.....".rv.2F..M...'w!.dT....[..oy.....J............./c?]...B....YN.;...Z..$..j..F......k.._<..e..6t...)...<....g^.......{.S.{4..=...._'5B....\$..\|@.i..<.y.N...`+....l6.N:....s.2....B^F..6z.+.}.........^.ll.J....2.'/...c.$

C:\Users\user\Downloads\Invoicelogo_2023-06-20_Logo_Assek_ZohoBooks240px.png.crdownload

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 340 x 122, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	27357
Entropy (8bit):	7.710470388735066
Encrypted:	false
SSDEEP:	768:Hu8qBx8Abk3IgjwEbWt1A/5/s6kM5LrY/:Hq/V2Ig8GWLA/mM5Q/
MD5:	97220B0DBF1FC03923E35E656A44D53B
SHA1:	E73C73A9FF61427ED8C3B2DE3C027EEF0927EB65
SHA-256:	28A84C98EBF701E17B409174D5215CA1D3DD2026E709A40C8F84683CA634E20F
SHA-512:	C26EAB3932690D0E3987148FD17902A226582E0B1FE47B7AD6D094532C85EA90E16436437B2EA4E80D04C292301DEC9E092F6DDE3152DA7BD0D65A9F08355002
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...T...z......C.G...nzTXtRaw profile type exif..x..Yr-9.].1....;0..f.........\|i.T..I..D..............R.6.6.".u.'?...1..).......O....\|..)......n?........4..........?..{......hE......J..C....]......u.....'......<..........i..\|K*......._B..._si.0.9K-......?...n...Z..E....~.[...:.=[5....-......}H..._.\..O....,...../.....].j..~7.g..O...U...f...q..>......;.>w.)...j:i....}...k.!;?.s.~..wQ..>..^F9.........Z.w..w....I.4'..x......7..VHI.l....Y.f....22..oP...?...P^..l..Zd...s....A..%.......L~~/@..uc1tCMd-..,E..S"...M..K.....a...b.g..x.^.[....fd.._NnF.$..F.x...l...5o..6.X.ffn....k......^z.[....s.Q..6l..c.9....wO^0....ZX.\|.5....m...{.\|..?..?..3o....].~..w>J...k.....e.7....?.Z..Z.2..._Y......'M9#a9.D.])...r.{.5+s.Y.....".rv.2F..M...'w!.dT....[..oy.....J............./c?]...B....YN.;...Z..$..j..F......k.._<..e..6t...)...<....g^.......{.S.{4..=...._'5B....\$..\|@.i..<.y.N...`+....l6.N:....s.2....B^F..6z.+.}.........^.ll.J....2.'/...c.$

C:\Windows\debug\WIA\wiatrace.log

Download File

Process:	C:\Windows\SysWOW64\mspaint.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	1514
Entropy (8bit):	5.26288841778588
Encrypted:	false
SSDEEP:	24:0uuiWF02k9YXC9WF0qXaJWF0HXd/bXE34W/Xd/TzWlgNYxeejWF0kuqGWF0w3O79:0uuiWSmXuWSBJWS3RzE34WfRTzWg07We
MD5:	AA8DB1904B26339C6F5CA36608B1AA4E
SHA1:	C54479D4F4E663F43DA6FDAE69BD9BB9520B6B91
SHA-256:	6C5F2D0154BC2817E29CC110BA898E74790C7BC983A02DF8A053E826E831D67B
SHA-512:	0BF41AA8EBE4AB84AB466EC7B2A7B18E299D7E497C860972A291D390DF2825A1A20253C74750054B2C614E10D291029819033AB7623A0E0ADADED98BA53A91FC
Malicious:	false
Reputation:	low
Preview:	..************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [572] at 2024/10/25 09:37:16:688 *************..WIA: 572.2000 16 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server..WIA: 572.2000 16 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 030E4658 from server...WIA: 572.2000 16 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started.....WIA: 572.2000 16 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information...WIA: 572.2000 16 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration:..WIA: 572.2000 16 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: , callback: 0x050084E0..WIA: 572.6472 16 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel.....WIA: 572

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 340 x 122, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	27357
Entropy (8bit):	7.710470388735066
Encrypted:	false
SSDEEP:	768:Hu8qBx8Abk3IgjwEbWt1A/5/s6kM5LrY/:Hq/V2Ig8GWLA/mM5Q/
MD5:	97220B0DBF1FC03923E35E656A44D53B
SHA1:	E73C73A9FF61427ED8C3B2DE3C027EEF0927EB65
SHA-256:	28A84C98EBF701E17B409174D5215CA1D3DD2026E709A40C8F84683CA634E20F
SHA-512:	C26EAB3932690D0E3987148FD17902A226582E0B1FE47B7AD6D094532C85EA90E16436437B2EA4E80D04C292301DEC9E092F6DDE3152DA7BD0D65A9F08355002
Malicious:	false
Reputation:	low
URL:	https://books.zoho.com/api/v3/settings/templates/invoicelogo/2-9f5f6126fb9f5927bb890a052eb3e49c534d130e54c0d7eb3f0166cd0041c6789a3b840ec167bdeab503b1141cf436f4
Preview:	.PNG........IHDR...T...z......C.G...nzTXtRaw profile type exif..x..Yr-9.].1....;0..f.........\|i.T..I..D..............R.6.6.".u.'?...1..).......O....\|..)......n?........4..........?..{......hE......J..C....]......u.....'......<..........i..\|K*......._B..._si.0.9K-......?...n...Z..E....~.[...:.=[5....-......}H..._.\..O....,...../.....].j..~7.g..O...U...f...q..>......;.>w.)...j:i....}...k.!;?.s.~..wQ..>..^F9.........Z.w..w....I.4'..x......7..VHI.l....Y.f....22..oP...?...P^..l..Zd...s....A..%.......L~~/@..uc1tCMd-..,E..S"...M..K.....a...b.g..x.^.[....fd.._NnF.$..F.x...l...5o..6.X.ffn....k......^z.[....s.Q..6l..c.9....wO^0....ZX.\|.5....m...{.\|..?..?..3o....].~..w>J...k.....e.7....?.Z..Z.2..._Y......'M9#a9.D.])...r.{.5+s.Y.....".rv.2F..M...'w!.dT....[..oy.....J............./c?]...B....YN.;...Z..$..j..F......k.._<..e..6t...)...<....g^.......{.S.{4..=...._'5B....\$..\|@.i..<.y.N...`+....l6.N:....s.2....B^F..6z.+.}.........^.ll.J....2.'/...c.$

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 25, 2024 15:35:52.577269077 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 25, 2024 15:35:52.577270031 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 25, 2024 15:35:52.686790943 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 25, 2024 15:35:52.792952061 CEST	443	49713	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:52.793029070 CEST	443	49713	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:52.793044090 CEST	443	49713	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:52.793067932 CEST	443	49713	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:52.793078899 CEST	443	49713	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:52.793088913 CEST	443	49713	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:52.793102026 CEST	443	49713	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:52.793113947 CEST	443	49713	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:52.793184042 CEST	49713	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:52.793272972 CEST	49713	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:52.793517113 CEST	443	49713	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:52.793543100 CEST	443	49713	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:52.793555975 CEST	443	49713	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:52.793596983 CEST	49713	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:52.793961048 CEST	443	49713	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:52.793975115 CEST	443	49713	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:52.793986082 CEST	443	49713	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:52.794120073 CEST	49713	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:52.794120073 CEST	49713	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:52.910218000 CEST	443	49713	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:52.910248995 CEST	443	49713	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:52.910260916 CEST	443	49713	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:52.910334110 CEST	443	49713	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:52.910777092 CEST	49713	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:52.910777092 CEST	49713	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:52.911252022 CEST	49713	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:52.911252022 CEST	49713	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:52.916495085 CEST	443	49713	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:52.916610956 CEST	443	49713	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:52.961961031 CEST	49714	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:52.961999893 CEST	443	49714	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:52.962106943 CEST	49714	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:52.962304115 CEST	49714	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:52.962311983 CEST	443	49714	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:54.038060904 CEST	443	49714	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:54.038142920 CEST	49714	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:54.055876970 CEST	49714	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:54.055919886 CEST	443	49714	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:54.056941032 CEST	443	49714	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:54.057549000 CEST	49714	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:54.057612896 CEST	49714	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:54.057730913 CEST	443	49714	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:55.133070946 CEST	443	49714	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:55.133095980 CEST	443	49714	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:55.133131027 CEST	443	49714	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:55.133183956 CEST	49714	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:55.133213997 CEST	443	49714	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:55.133245945 CEST	49714	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:55.133868933 CEST	49714	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:55.133886099 CEST	49714	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:55.134021997 CEST	443	49714	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:55.134053946 CEST	443	49714	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:55.134182930 CEST	49714	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:55.158444881 CEST	49715	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:55.158488035 CEST	443	49715	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:55.158691883 CEST	49715	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:55.158869028 CEST	49715	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:55.158888102 CEST	443	49715	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:56.231086969 CEST	443	49715	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:56.280328989 CEST	49715	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:56.908370018 CEST	49715	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:56.908394098 CEST	443	49715	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:56.915039062 CEST	49715	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:56.915051937 CEST	443	49715	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:56.915076017 CEST	49715	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:56.915083885 CEST	443	49715	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:57.386765003 CEST	443	49715	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:57.386795998 CEST	443	49715	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:57.386802912 CEST	443	49715	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:57.386842966 CEST	443	49715	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:57.386889935 CEST	49715	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:57.386917114 CEST	443	49715	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:57.386956930 CEST	49715	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:57.436568022 CEST	49715	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:57.500355959 CEST	443	49715	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:57.500416040 CEST	443	49715	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:57.500519037 CEST	49715	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:57.709265947 CEST	49715	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:57.709305048 CEST	443	49715	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:57.709321022 CEST	49715	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:57.709328890 CEST	443	49715	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:59.399854898 CEST	49716	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:59.399918079 CEST	443	49716	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:59.399980068 CEST	49716	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:59.401382923 CEST	49716	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:59.401396036 CEST	443	49716	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:59.414411068 CEST	49717	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:59.414458990 CEST	443	49717	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:59.414521933 CEST	49717	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:59.414690018 CEST	49717	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:35:59.414701939 CEST	443	49717	20.190.159.0	192.168.2.5
Oct 25, 2024 15:35:59.433700085 CEST	49718	443	192.168.2.5	20.190.159.75
Oct 25, 2024 15:35:59.433739901 CEST	443	49718	20.190.159.75	192.168.2.5
Oct 25, 2024 15:35:59.433820963 CEST	49718	443	192.168.2.5	20.190.159.75
Oct 25, 2024 15:35:59.434252024 CEST	49718	443	192.168.2.5	20.190.159.75
Oct 25, 2024 15:35:59.434264898 CEST	443	49718	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:00.469592094 CEST	443	49716	20.190.159.0	192.168.2.5
Oct 25, 2024 15:36:00.504982948 CEST	443	49717	20.190.159.0	192.168.2.5
Oct 25, 2024 15:36:00.561602116 CEST	49717	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:36:00.589327097 CEST	49716	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:36:00.589342117 CEST	443	49716	20.190.159.0	192.168.2.5
Oct 25, 2024 15:36:00.590061903 CEST	49716	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:36:00.590068102 CEST	443	49716	20.190.159.0	192.168.2.5
Oct 25, 2024 15:36:00.590131044 CEST	49716	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:36:00.590137005 CEST	443	49716	20.190.159.0	192.168.2.5
Oct 25, 2024 15:36:00.599378109 CEST	49717	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:36:00.599392891 CEST	443	49717	20.190.159.0	192.168.2.5
Oct 25, 2024 15:36:00.600049019 CEST	49717	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:36:00.600054026 CEST	443	49717	20.190.159.0	192.168.2.5
Oct 25, 2024 15:36:00.600102901 CEST	49717	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:36:00.600110054 CEST	443	49717	20.190.159.0	192.168.2.5
Oct 25, 2024 15:36:00.914191008 CEST	443	49718	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:00.914271116 CEST	49718	443	192.168.2.5	20.190.159.75
Oct 25, 2024 15:36:01.064966917 CEST	443	49716	20.190.159.0	192.168.2.5
Oct 25, 2024 15:36:01.064992905 CEST	443	49716	20.190.159.0	192.168.2.5
Oct 25, 2024 15:36:01.065001965 CEST	443	49716	20.190.159.0	192.168.2.5
Oct 25, 2024 15:36:01.065011024 CEST	443	49716	20.190.159.0	192.168.2.5
Oct 25, 2024 15:36:01.065032959 CEST	443	49716	20.190.159.0	192.168.2.5
Oct 25, 2024 15:36:01.065118074 CEST	49716	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:36:01.065118074 CEST	49716	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:36:01.065144062 CEST	443	49716	20.190.159.0	192.168.2.5
Oct 25, 2024 15:36:01.077060938 CEST	443	49717	20.190.159.0	192.168.2.5
Oct 25, 2024 15:36:01.077090025 CEST	443	49717	20.190.159.0	192.168.2.5
Oct 25, 2024 15:36:01.077101946 CEST	443	49717	20.190.159.0	192.168.2.5
Oct 25, 2024 15:36:01.077169895 CEST	443	49717	20.190.159.0	192.168.2.5
Oct 25, 2024 15:36:01.077192068 CEST	49717	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:36:01.077220917 CEST	443	49717	20.190.159.0	192.168.2.5
Oct 25, 2024 15:36:01.077250957 CEST	443	49717	20.190.159.0	192.168.2.5
Oct 25, 2024 15:36:01.077263117 CEST	49717	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:36:01.077263117 CEST	49717	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:36:01.154423952 CEST	49717	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:36:01.178962946 CEST	443	49716	20.190.159.0	192.168.2.5
Oct 25, 2024 15:36:01.179080963 CEST	49716	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:36:01.191194057 CEST	443	49717	20.190.159.0	192.168.2.5
Oct 25, 2024 15:36:01.191349983 CEST	443	49717	20.190.159.0	192.168.2.5
Oct 25, 2024 15:36:01.191464901 CEST	49717	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:36:01.267891884 CEST	49718	443	192.168.2.5	20.190.159.75
Oct 25, 2024 15:36:01.267931938 CEST	443	49718	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:01.268402100 CEST	443	49718	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:01.448566914 CEST	49718	443	192.168.2.5	20.190.159.75
Oct 25, 2024 15:36:01.580183983 CEST	49716	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:36:01.580219030 CEST	443	49716	20.190.159.0	192.168.2.5
Oct 25, 2024 15:36:01.599818945 CEST	49717	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:36:01.599818945 CEST	49717	443	192.168.2.5	20.190.159.0
Oct 25, 2024 15:36:01.599844933 CEST	443	49717	20.190.159.0	192.168.2.5
Oct 25, 2024 15:36:01.599858046 CEST	443	49717	20.190.159.0	192.168.2.5
Oct 25, 2024 15:36:01.627969027 CEST	49718	443	192.168.2.5	20.190.159.75
Oct 25, 2024 15:36:01.628031969 CEST	49718	443	192.168.2.5	20.190.159.75
Oct 25, 2024 15:36:01.628079891 CEST	443	49718	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:02.001708984 CEST	49723	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:02.001758099 CEST	443	49723	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:02.001924038 CEST	49723	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:02.002371073 CEST	49724	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:02.002393961 CEST	443	49724	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:02.002484083 CEST	49724	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:02.002994061 CEST	49723	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:02.003012896 CEST	443	49723	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:02.003087044 CEST	49724	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:02.003098011 CEST	443	49724	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:02.086106062 CEST	443	49718	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:02.086127043 CEST	443	49718	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:02.086224079 CEST	49718	443	192.168.2.5	20.190.159.75
Oct 25, 2024 15:36:02.086261988 CEST	443	49718	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:02.086546898 CEST	49718	443	192.168.2.5	20.190.159.75
Oct 25, 2024 15:36:02.086586952 CEST	49718	443	192.168.2.5	20.190.159.75
Oct 25, 2024 15:36:02.086756945 CEST	443	49718	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:02.086791992 CEST	443	49718	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:02.086872101 CEST	49718	443	192.168.2.5	20.190.159.75
Oct 25, 2024 15:36:02.137209892 CEST	49727	443	192.168.2.5	20.190.159.75
Oct 25, 2024 15:36:02.137253046 CEST	443	49727	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:02.137389898 CEST	49727	443	192.168.2.5	20.190.159.75
Oct 25, 2024 15:36:02.137546062 CEST	49727	443	192.168.2.5	20.190.159.75
Oct 25, 2024 15:36:02.137559891 CEST	443	49727	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:02.180618048 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 25, 2024 15:36:02.352416039 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 25, 2024 15:36:02.352416039 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 25, 2024 15:36:02.967626095 CEST	443	49727	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:02.968300104 CEST	49727	443	192.168.2.5	20.190.159.75
Oct 25, 2024 15:36:02.968352079 CEST	443	49727	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:02.969103098 CEST	49727	443	192.168.2.5	20.190.159.75
Oct 25, 2024 15:36:02.969114065 CEST	443	49727	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:02.969208956 CEST	49727	443	192.168.2.5	20.190.159.75
Oct 25, 2024 15:36:02.969219923 CEST	443	49727	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:03.132951021 CEST	443	49724	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:03.133161068 CEST	49724	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:03.144396067 CEST	49724	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:03.144423962 CEST	443	49724	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:03.144885063 CEST	443	49724	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:03.146547079 CEST	49724	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:03.146605015 CEST	49724	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:03.146610975 CEST	443	49724	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:03.146951914 CEST	49724	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:03.166424990 CEST	443	49723	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:03.166512966 CEST	49723	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:03.171416044 CEST	49723	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:03.171432972 CEST	443	49723	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:03.171677113 CEST	443	49723	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:03.172928095 CEST	49723	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:03.172997952 CEST	49723	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:03.173010111 CEST	443	49723	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:03.173224926 CEST	49723	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:03.191338062 CEST	443	49724	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:03.219352007 CEST	443	49723	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:03.396755934 CEST	443	49724	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:03.397948980 CEST	49724	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:03.397955894 CEST	443	49724	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:03.397974968 CEST	49724	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:03.398006916 CEST	49724	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:03.426986933 CEST	443	49723	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:03.427490950 CEST	49723	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:03.427517891 CEST	443	49723	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:03.427697897 CEST	443	49723	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:03.427766085 CEST	49723	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:03.429003954 CEST	49723	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:03.507143021 CEST	49729	443	192.168.2.5	204.141.42.145
Oct 25, 2024 15:36:03.507173061 CEST	443	49729	204.141.42.145	192.168.2.5
Oct 25, 2024 15:36:03.507354021 CEST	49729	443	192.168.2.5	204.141.42.145
Oct 25, 2024 15:36:03.507447958 CEST	49730	443	192.168.2.5	204.141.42.145
Oct 25, 2024 15:36:03.507486105 CEST	443	49730	204.141.42.145	192.168.2.5
Oct 25, 2024 15:36:03.507570028 CEST	49730	443	192.168.2.5	204.141.42.145
Oct 25, 2024 15:36:03.507762909 CEST	49729	443	192.168.2.5	204.141.42.145
Oct 25, 2024 15:36:03.507777929 CEST	443	49729	204.141.42.145	192.168.2.5
Oct 25, 2024 15:36:03.508059978 CEST	49730	443	192.168.2.5	204.141.42.145
Oct 25, 2024 15:36:03.508074999 CEST	443	49730	204.141.42.145	192.168.2.5
Oct 25, 2024 15:36:03.625202894 CEST	443	49727	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:03.625282049 CEST	443	49727	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:03.625386000 CEST	49727	443	192.168.2.5	20.190.159.75
Oct 25, 2024 15:36:03.625408888 CEST	443	49727	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:03.625490904 CEST	49727	443	192.168.2.5	20.190.159.75
Oct 25, 2024 15:36:03.625883102 CEST	49727	443	192.168.2.5	20.190.159.75
Oct 25, 2024 15:36:03.625883102 CEST	49727	443	192.168.2.5	20.190.159.75
Oct 25, 2024 15:36:03.625895977 CEST	443	49727	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:03.626190901 CEST	443	49727	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:03.626236916 CEST	443	49727	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:03.626357079 CEST	49727	443	192.168.2.5	20.190.159.75
Oct 25, 2024 15:36:03.656380892 CEST	49731	443	192.168.2.5	20.190.159.75
Oct 25, 2024 15:36:03.656435013 CEST	443	49731	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:03.656780958 CEST	49731	443	192.168.2.5	20.190.159.75
Oct 25, 2024 15:36:03.656964064 CEST	49731	443	192.168.2.5	20.190.159.75
Oct 25, 2024 15:36:03.656976938 CEST	443	49731	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:04.155946970 CEST	443	49709	23.1.237.91	192.168.2.5
Oct 25, 2024 15:36:04.158404112 CEST	49709	443	192.168.2.5	23.1.237.91
Oct 25, 2024 15:36:04.206661940 CEST	443	49730	204.141.42.145	192.168.2.5
Oct 25, 2024 15:36:04.207854033 CEST	443	49729	204.141.42.145	192.168.2.5
Oct 25, 2024 15:36:04.219136000 CEST	49729	443	192.168.2.5	204.141.42.145
Oct 25, 2024 15:36:04.219151020 CEST	443	49729	204.141.42.145	192.168.2.5
Oct 25, 2024 15:36:04.219645023 CEST	49730	443	192.168.2.5	204.141.42.145
Oct 25, 2024 15:36:04.219660997 CEST	443	49730	204.141.42.145	192.168.2.5
Oct 25, 2024 15:36:04.220341921 CEST	443	49729	204.141.42.145	192.168.2.5
Oct 25, 2024 15:36:04.220429897 CEST	49729	443	192.168.2.5	204.141.42.145
Oct 25, 2024 15:36:04.220803976 CEST	443	49730	204.141.42.145	192.168.2.5
Oct 25, 2024 15:36:04.220901012 CEST	49730	443	192.168.2.5	204.141.42.145
Oct 25, 2024 15:36:04.223453999 CEST	49729	443	192.168.2.5	204.141.42.145
Oct 25, 2024 15:36:04.223524094 CEST	443	49729	204.141.42.145	192.168.2.5
Oct 25, 2024 15:36:04.225085020 CEST	49729	443	192.168.2.5	204.141.42.145
Oct 25, 2024 15:36:04.225094080 CEST	443	49729	204.141.42.145	192.168.2.5
Oct 25, 2024 15:36:04.225255013 CEST	49730	443	192.168.2.5	204.141.42.145
Oct 25, 2024 15:36:04.225338936 CEST	443	49730	204.141.42.145	192.168.2.5
Oct 25, 2024 15:36:04.273427010 CEST	49730	443	192.168.2.5	204.141.42.145
Oct 25, 2024 15:36:04.273443937 CEST	443	49730	204.141.42.145	192.168.2.5
Oct 25, 2024 15:36:04.273467064 CEST	49729	443	192.168.2.5	204.141.42.145
Oct 25, 2024 15:36:04.319492102 CEST	49730	443	192.168.2.5	204.141.42.145
Oct 25, 2024 15:36:04.503655910 CEST	443	49731	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:04.505604029 CEST	49731	443	192.168.2.5	20.190.159.75
Oct 25, 2024 15:36:04.505623102 CEST	443	49731	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:04.508440018 CEST	49731	443	192.168.2.5	20.190.159.75
Oct 25, 2024 15:36:04.508445024 CEST	443	49731	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:04.508496046 CEST	49731	443	192.168.2.5	20.190.159.75
Oct 25, 2024 15:36:04.508502960 CEST	443	49731	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:04.625057936 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:04.625111103 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:04.625549078 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:04.625756025 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:04.625771046 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:04.773400068 CEST	443	49729	204.141.42.145	192.168.2.5
Oct 25, 2024 15:36:04.773427963 CEST	443	49729	204.141.42.145	192.168.2.5
Oct 25, 2024 15:36:04.773436069 CEST	443	49729	204.141.42.145	192.168.2.5
Oct 25, 2024 15:36:04.773469925 CEST	443	49729	204.141.42.145	192.168.2.5
Oct 25, 2024 15:36:04.773492098 CEST	443	49729	204.141.42.145	192.168.2.5
Oct 25, 2024 15:36:04.773503065 CEST	443	49729	204.141.42.145	192.168.2.5
Oct 25, 2024 15:36:04.773540020 CEST	49729	443	192.168.2.5	204.141.42.145
Oct 25, 2024 15:36:04.773586988 CEST	443	49729	204.141.42.145	192.168.2.5
Oct 25, 2024 15:36:04.773602962 CEST	49729	443	192.168.2.5	204.141.42.145
Oct 25, 2024 15:36:04.773683071 CEST	49729	443	192.168.2.5	204.141.42.145
Oct 25, 2024 15:36:04.783924103 CEST	443	49729	204.141.42.145	192.168.2.5
Oct 25, 2024 15:36:04.783973932 CEST	443	49729	204.141.42.145	192.168.2.5
Oct 25, 2024 15:36:04.784013987 CEST	443	49729	204.141.42.145	192.168.2.5
Oct 25, 2024 15:36:04.784054995 CEST	49729	443	192.168.2.5	204.141.42.145
Oct 25, 2024 15:36:04.784085035 CEST	49729	443	192.168.2.5	204.141.42.145
Oct 25, 2024 15:36:04.784818888 CEST	49729	443	192.168.2.5	204.141.42.145
Oct 25, 2024 15:36:04.784838915 CEST	443	49729	204.141.42.145	192.168.2.5
Oct 25, 2024 15:36:04.832964897 CEST	443	49731	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:04.832990885 CEST	443	49731	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:04.833022118 CEST	443	49731	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:04.833221912 CEST	49731	443	192.168.2.5	20.190.159.75
Oct 25, 2024 15:36:04.833221912 CEST	49731	443	192.168.2.5	20.190.159.75
Oct 25, 2024 15:36:04.833235979 CEST	443	49731	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:04.833611965 CEST	49731	443	192.168.2.5	20.190.159.75
Oct 25, 2024 15:36:04.833625078 CEST	443	49731	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:04.833736897 CEST	443	49731	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:04.833770037 CEST	443	49731	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:04.833817005 CEST	49731	443	192.168.2.5	20.190.159.75
Oct 25, 2024 15:36:04.833817005 CEST	49731	443	192.168.2.5	20.190.159.75
Oct 25, 2024 15:36:04.833826065 CEST	443	49731	20.190.159.75	192.168.2.5
Oct 25, 2024 15:36:05.353657961 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:05.353745937 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:05.360073090 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:05.360095024 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:05.360440969 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:05.377981901 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:05.423330069 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:05.443892956 CEST	49735	443	192.168.2.5	142.250.186.164
Oct 25, 2024 15:36:05.443937063 CEST	443	49735	142.250.186.164	192.168.2.5
Oct 25, 2024 15:36:05.444109917 CEST	49735	443	192.168.2.5	142.250.186.164
Oct 25, 2024 15:36:05.444535971 CEST	49735	443	192.168.2.5	142.250.186.164
Oct 25, 2024 15:36:05.444554090 CEST	443	49735	142.250.186.164	192.168.2.5
Oct 25, 2024 15:36:05.586639881 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:05.586659908 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:05.586675882 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:05.586760044 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:05.586797953 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:05.586843014 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:05.701822042 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:05.701842070 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:05.701899052 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:05.701929092 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:05.701951027 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:05.701966047 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:05.817281008 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:05.817305088 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:05.817380905 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:05.817409039 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:05.817457914 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:05.854180098 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:05.854204893 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:05.854250908 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:05.854281902 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:05.854305983 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:05.854331970 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:05.968635082 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:05.968663931 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:05.968739033 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:05.968769073 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:05.968959093 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.084423065 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.084448099 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.084527969 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.084558964 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.084614992 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.163657904 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.163692951 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.163750887 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.163779974 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.163811922 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.163824081 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.201251030 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.201277018 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.201364994 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.201399088 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.201448917 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.294970036 CEST	443	49735	142.250.186.164	192.168.2.5
Oct 25, 2024 15:36:06.295306921 CEST	49735	443	192.168.2.5	142.250.186.164
Oct 25, 2024 15:36:06.295352936 CEST	443	49735	142.250.186.164	192.168.2.5
Oct 25, 2024 15:36:06.296415091 CEST	443	49735	142.250.186.164	192.168.2.5
Oct 25, 2024 15:36:06.296492100 CEST	49735	443	192.168.2.5	142.250.186.164
Oct 25, 2024 15:36:06.297765017 CEST	49735	443	192.168.2.5	142.250.186.164
Oct 25, 2024 15:36:06.297847986 CEST	443	49735	142.250.186.164	192.168.2.5
Oct 25, 2024 15:36:06.323854923 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.323880911 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.323961973 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.323996067 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.324065924 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.337351084 CEST	49735	443	192.168.2.5	142.250.186.164
Oct 25, 2024 15:36:06.337367058 CEST	443	49735	142.250.186.164	192.168.2.5
Oct 25, 2024 15:36:06.382788897 CEST	49735	443	192.168.2.5	142.250.186.164
Oct 25, 2024 15:36:06.394823074 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.394854069 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.394917011 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.394953012 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.394973040 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.394994020 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.440082073 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.440107107 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.440207005 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.440237999 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.440308094 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.546466112 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.546489954 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.546590090 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.546618938 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.549932003 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.625307083 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.625334024 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.625432968 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.625462055 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.625595093 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.625658035 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.625668049 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.625682116 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.625735998 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.645701885 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.645742893 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.645756960 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.645765066 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.903981924 CEST	49736	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.904036045 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.904216051 CEST	49736	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.904567003 CEST	49737	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.904633045 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.904697895 CEST	49737	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.905706882 CEST	49738	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.905734062 CEST	443	49738	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.905872107 CEST	49738	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.906277895 CEST	49739	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.906299114 CEST	443	49739	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.906493902 CEST	49739	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.906567097 CEST	49736	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.906588078 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.906728983 CEST	49739	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.906749010 CEST	443	49739	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.908379078 CEST	49740	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.908411026 CEST	443	49740	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.908507109 CEST	49740	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.908556938 CEST	49737	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.908577919 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.908848047 CEST	49738	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.908869028 CEST	443	49738	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.909089088 CEST	49740	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:06.909101009 CEST	443	49740	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:06.958365917 CEST	49741	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:06.958436012 CEST	443	49741	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:06.958517075 CEST	49741	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:06.959404945 CEST	49741	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:06.959431887 CEST	443	49741	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:07.004091978 CEST	49742	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:07.004149914 CEST	443	49742	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:07.004487038 CEST	49742	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:07.006943941 CEST	49742	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:07.006964922 CEST	443	49742	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:07.029462099 CEST	49743	443	192.168.2.5	184.28.90.27
Oct 25, 2024 15:36:07.029491901 CEST	443	49743	184.28.90.27	192.168.2.5
Oct 25, 2024 15:36:07.029583931 CEST	49743	443	192.168.2.5	184.28.90.27
Oct 25, 2024 15:36:07.048610926 CEST	49743	443	192.168.2.5	184.28.90.27
Oct 25, 2024 15:36:07.048628092 CEST	443	49743	184.28.90.27	192.168.2.5
Oct 25, 2024 15:36:07.629538059 CEST	443	49740	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.630258083 CEST	49740	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.630297899 CEST	443	49740	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.630830050 CEST	49740	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.630837917 CEST	443	49740	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.630934000 CEST	443	49739	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.631458998 CEST	49739	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.631489038 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.631500006 CEST	443	49739	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.632019043 CEST	49739	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.632029057 CEST	443	49739	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.632096052 CEST	49737	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.632111073 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.632586002 CEST	49737	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.632594109 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.635674953 CEST	443	49738	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.636054993 CEST	49738	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.636096954 CEST	443	49738	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.637563944 CEST	49738	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.637582064 CEST	443	49738	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.653290987 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.653740883 CEST	49736	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.653769970 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.654233932 CEST	49736	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.654242039 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.757431984 CEST	443	49740	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.757893085 CEST	443	49740	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.757956982 CEST	49740	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.757997990 CEST	49740	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.758018017 CEST	443	49740	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.758032084 CEST	49740	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.758038044 CEST	443	49740	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.759176016 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.759246111 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.759294033 CEST	49737	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.760715961 CEST	49737	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.760739088 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.760752916 CEST	49737	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.760761976 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.761579990 CEST	443	49739	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.761606932 CEST	443	49739	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.761658907 CEST	49739	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.761671066 CEST	443	49739	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.761723042 CEST	443	49739	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.761766911 CEST	49739	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.761828899 CEST	49739	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.761835098 CEST	443	49739	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.761848927 CEST	49739	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.761852980 CEST	443	49739	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.763345003 CEST	49744	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.763375998 CEST	443	49744	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.763443947 CEST	49744	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.763643026 CEST	49744	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.763658047 CEST	443	49744	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.765594006 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.765633106 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.765696049 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.765837908 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.765850067 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.765901089 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.765932083 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.765942097 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.766047955 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.766063929 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.768251896 CEST	443	49738	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.768277884 CEST	443	49738	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.768337011 CEST	443	49738	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.768337965 CEST	49738	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.768383026 CEST	49738	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.768467903 CEST	49738	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.768479109 CEST	443	49738	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.768490076 CEST	49738	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.768495083 CEST	443	49738	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.771090031 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.771110058 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.771177053 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.771318913 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.771330118 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.784425974 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.784451008 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.784511089 CEST	49736	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.784528017 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.784576893 CEST	49736	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.784785032 CEST	49736	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.784790039 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.784797907 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.784847975 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.784866095 CEST	49736	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.784877062 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.787405014 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.787451029 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.787530899 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.787682056 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:07.787698984 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:07.927326918 CEST	443	49743	184.28.90.27	192.168.2.5
Oct 25, 2024 15:36:07.927403927 CEST	49743	443	192.168.2.5	184.28.90.27
Oct 25, 2024 15:36:07.933124065 CEST	49743	443	192.168.2.5	184.28.90.27
Oct 25, 2024 15:36:07.933136940 CEST	443	49743	184.28.90.27	192.168.2.5
Oct 25, 2024 15:36:07.933506012 CEST	443	49743	184.28.90.27	192.168.2.5
Oct 25, 2024 15:36:07.975819111 CEST	49743	443	192.168.2.5	184.28.90.27
Oct 25, 2024 15:36:08.065491915 CEST	49743	443	192.168.2.5	184.28.90.27
Oct 25, 2024 15:36:08.103451014 CEST	443	49741	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:08.103554010 CEST	49741	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:08.107341051 CEST	443	49743	184.28.90.27	192.168.2.5
Oct 25, 2024 15:36:08.108831882 CEST	49741	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:08.108851910 CEST	443	49741	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:08.109123945 CEST	443	49741	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:08.110872030 CEST	49741	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:08.110976934 CEST	49741	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:08.110984087 CEST	443	49741	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:08.111243963 CEST	49741	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:08.119008064 CEST	443	49742	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:08.119128942 CEST	49742	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:08.124279976 CEST	49742	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:08.124299049 CEST	443	49742	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:08.124572992 CEST	443	49742	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:08.126728058 CEST	49742	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:08.126842022 CEST	49742	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:08.126847029 CEST	443	49742	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:08.127171040 CEST	49742	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:08.151357889 CEST	443	49741	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:08.167334080 CEST	443	49742	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:08.330929041 CEST	443	49743	184.28.90.27	192.168.2.5
Oct 25, 2024 15:36:08.331016064 CEST	443	49743	184.28.90.27	192.168.2.5
Oct 25, 2024 15:36:08.331223965 CEST	49743	443	192.168.2.5	184.28.90.27
Oct 25, 2024 15:36:08.331269026 CEST	443	49743	184.28.90.27	192.168.2.5
Oct 25, 2024 15:36:08.331284046 CEST	49743	443	192.168.2.5	184.28.90.27
Oct 25, 2024 15:36:08.331293106 CEST	443	49743	184.28.90.27	192.168.2.5
Oct 25, 2024 15:36:08.331305981 CEST	49743	443	192.168.2.5	184.28.90.27
Oct 25, 2024 15:36:08.331310987 CEST	443	49743	184.28.90.27	192.168.2.5
Oct 25, 2024 15:36:08.366276979 CEST	443	49741	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:08.367274046 CEST	49741	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:08.367324114 CEST	443	49741	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:08.367352009 CEST	49741	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:08.367539883 CEST	443	49741	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:08.367794037 CEST	49741	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:08.367815018 CEST	49741	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:08.376029968 CEST	443	49742	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:08.376568079 CEST	49742	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:08.376568079 CEST	49742	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:08.376588106 CEST	443	49742	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:08.376698971 CEST	49742	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:08.385730982 CEST	49749	443	192.168.2.5	184.28.90.27
Oct 25, 2024 15:36:08.385792971 CEST	443	49749	184.28.90.27	192.168.2.5
Oct 25, 2024 15:36:08.386080027 CEST	49749	443	192.168.2.5	184.28.90.27
Oct 25, 2024 15:36:08.386426926 CEST	49749	443	192.168.2.5	184.28.90.27
Oct 25, 2024 15:36:08.386445045 CEST	443	49749	184.28.90.27	192.168.2.5
Oct 25, 2024 15:36:08.492717981 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.492816925 CEST	443	49744	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.494148970 CEST	49744	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:08.494179964 CEST	443	49744	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.495714903 CEST	49744	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:08.495723009 CEST	443	49744	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.495956898 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:08.495990992 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.496866941 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:08.496881008 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.509697914 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.510474920 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:08.510497093 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.511451006 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:08.511460066 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.512739897 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.513297081 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:08.513312101 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.513834953 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:08.513839960 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.519680023 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.520206928 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:08.520237923 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.520728111 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:08.520735979 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.621946096 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.622397900 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.622551918 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:08.622832060 CEST	443	49744	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.623027086 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:08.623049021 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.623060942 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:08.623066902 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.623603106 CEST	443	49744	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.623672962 CEST	49744	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:08.623929977 CEST	49744	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:08.623948097 CEST	443	49744	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.623963118 CEST	49744	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:08.623969078 CEST	443	49744	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.626518965 CEST	49750	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:08.626543999 CEST	49751	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:08.626564026 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.626571894 CEST	443	49751	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.626661062 CEST	49751	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:08.626663923 CEST	49750	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:08.626907110 CEST	49750	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:08.626920938 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.627000093 CEST	49751	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:08.627019882 CEST	443	49751	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.645174026 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.645375967 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.645441055 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:08.645776987 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:08.645795107 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.651619911 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.651689053 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.651804924 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:08.653507948 CEST	49752	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:08.653544903 CEST	443	49752	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.653620958 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:08.653641939 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.653654099 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:08.653656960 CEST	49752	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:08.653660059 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.654217005 CEST	49752	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:08.654230118 CEST	443	49752	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.662868977 CEST	49753	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:08.662923098 CEST	443	49753	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:08.663017988 CEST	49753	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:08.663203955 CEST	49753	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:08.663222075 CEST	443	49753	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.141870022 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.142056942 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.142219067 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.222306013 CEST	443	49749	184.28.90.27	192.168.2.5
Oct 25, 2024 15:36:09.222462893 CEST	49749	443	192.168.2.5	184.28.90.27
Oct 25, 2024 15:36:09.349589109 CEST	443	49751	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.371123075 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.374000072 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.374053001 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.374072075 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.374080896 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.375452995 CEST	49749	443	192.168.2.5	184.28.90.27
Oct 25, 2024 15:36:09.375484943 CEST	443	49749	184.28.90.27	192.168.2.5
Oct 25, 2024 15:36:09.375976086 CEST	443	49749	184.28.90.27	192.168.2.5
Oct 25, 2024 15:36:09.376000881 CEST	49751	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.376024961 CEST	443	49751	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.376307011 CEST	49750	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.376346111 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.376703978 CEST	49751	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.376708984 CEST	443	49751	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.376806021 CEST	49750	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.376815081 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.377666950 CEST	49749	443	192.168.2.5	184.28.90.27
Oct 25, 2024 15:36:09.379679918 CEST	49754	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.379730940 CEST	443	49754	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.379815102 CEST	49754	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.380002975 CEST	49754	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.380018950 CEST	443	49754	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.390247107 CEST	443	49752	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.390650988 CEST	49752	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.390662909 CEST	443	49752	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.391376019 CEST	49752	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.391383886 CEST	443	49752	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.407391071 CEST	443	49753	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.407937050 CEST	49753	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.407987118 CEST	443	49753	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.408487082 CEST	49753	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.408498049 CEST	443	49753	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.419363022 CEST	443	49749	184.28.90.27	192.168.2.5
Oct 25, 2024 15:36:09.504549980 CEST	443	49751	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.504637003 CEST	443	49751	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.504786968 CEST	49751	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.505021095 CEST	49751	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.505044937 CEST	443	49751	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.505058050 CEST	49751	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.505064011 CEST	443	49751	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.508632898 CEST	49755	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.508671045 CEST	443	49755	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.508961916 CEST	49755	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.509222984 CEST	49755	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.509237051 CEST	443	49755	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.513546944 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.513631105 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.513703108 CEST	49750	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.513843060 CEST	49750	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.513861895 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.513873100 CEST	49750	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.513880014 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.517369986 CEST	49756	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.517411947 CEST	443	49756	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.517534018 CEST	49756	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.517728090 CEST	49756	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.517749071 CEST	443	49756	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.522031069 CEST	443	49752	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.522097111 CEST	443	49752	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.522167921 CEST	49752	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.522361994 CEST	49752	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.522382975 CEST	443	49752	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.522402048 CEST	49752	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.522409916 CEST	443	49752	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.526824951 CEST	49757	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.526874065 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.526947021 CEST	49757	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.527086020 CEST	49757	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.527096987 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.538570881 CEST	443	49753	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.539287090 CEST	443	49753	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.539369106 CEST	49753	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.539421082 CEST	49753	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.539442062 CEST	443	49753	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.539457083 CEST	49753	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.539463043 CEST	443	49753	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.543261051 CEST	49758	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.543315887 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.543454885 CEST	49758	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.543713093 CEST	49758	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:09.543737888 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:09.619285107 CEST	443	49749	184.28.90.27	192.168.2.5
Oct 25, 2024 15:36:09.619395018 CEST	443	49749	184.28.90.27	192.168.2.5
Oct 25, 2024 15:36:09.619471073 CEST	49749	443	192.168.2.5	184.28.90.27
Oct 25, 2024 15:36:09.622179985 CEST	49749	443	192.168.2.5	184.28.90.27
Oct 25, 2024 15:36:09.622200966 CEST	443	49749	184.28.90.27	192.168.2.5
Oct 25, 2024 15:36:09.622214079 CEST	49749	443	192.168.2.5	184.28.90.27
Oct 25, 2024 15:36:09.622220039 CEST	443	49749	184.28.90.27	192.168.2.5
Oct 25, 2024 15:36:10.127732038 CEST	443	49754	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.128314972 CEST	49754	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.128348112 CEST	443	49754	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.129483938 CEST	49754	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.129492044 CEST	443	49754	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.245912075 CEST	443	49756	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.247934103 CEST	49756	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.247966051 CEST	443	49756	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.249423027 CEST	49756	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.249434948 CEST	443	49756	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.252242088 CEST	443	49755	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.252767086 CEST	49755	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.252796888 CEST	443	49755	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.254134893 CEST	49755	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.254141092 CEST	443	49755	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.258956909 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.259535074 CEST	49757	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.259586096 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.260212898 CEST	443	49754	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.260286093 CEST	443	49754	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.260461092 CEST	49754	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.260595083 CEST	49757	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.260601997 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.260976076 CEST	49754	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.260976076 CEST	49754	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.260998011 CEST	443	49754	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.261012077 CEST	443	49754	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.266191959 CEST	49759	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.266237020 CEST	443	49759	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.266634941 CEST	49759	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.266634941 CEST	49759	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.266674995 CEST	443	49759	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.285490036 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.286669016 CEST	49758	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.286669016 CEST	49758	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.286691904 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.286716938 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.373143911 CEST	443	49756	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.373548031 CEST	443	49756	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.373617887 CEST	49756	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.373699903 CEST	49756	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.373699903 CEST	49756	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.373713017 CEST	443	49756	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.373723030 CEST	443	49756	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.377588987 CEST	49760	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.377639055 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.377727985 CEST	49760	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.377887011 CEST	49760	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.377899885 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.384764910 CEST	443	49755	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.385149956 CEST	443	49755	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.385231018 CEST	49755	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.385370016 CEST	49755	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.385394096 CEST	443	49755	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.385406971 CEST	49755	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.385412931 CEST	443	49755	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.388114929 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.388329029 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.388395071 CEST	49757	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.388817072 CEST	49757	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.388838053 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.388849974 CEST	49757	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.388856888 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.414005041 CEST	49761	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.414074898 CEST	443	49761	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.414156914 CEST	49761	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.418211937 CEST	49762	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.418272018 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.418493986 CEST	49762	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.419188023 CEST	49761	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.419215918 CEST	443	49761	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.419683933 CEST	49762	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.419698000 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.440541029 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.440634012 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.440716028 CEST	49758	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.441365004 CEST	49758	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.441365004 CEST	49758	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.441381931 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.441391945 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.449259043 CEST	49763	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.449274063 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.449449062 CEST	49763	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.450030088 CEST	49763	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.450050116 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.985976934 CEST	443	49759	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.986989975 CEST	49759	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.987037897 CEST	443	49759	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:10.987708092 CEST	49759	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:10.987714052 CEST	443	49759	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.102019072 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.103677034 CEST	49760	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.103712082 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.105083942 CEST	49760	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.105089903 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.122287035 CEST	443	49759	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.123148918 CEST	443	49759	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.123233080 CEST	49759	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.123351097 CEST	49759	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.123378038 CEST	443	49759	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.123394966 CEST	49759	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.123402119 CEST	443	49759	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.127753019 CEST	49764	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.127804041 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.127892017 CEST	49764	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.128236055 CEST	49764	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.128252029 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.140806913 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.141328096 CEST	49762	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.141360044 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.142071962 CEST	49762	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.142079115 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.154926062 CEST	443	49761	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.155719042 CEST	49761	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.155759096 CEST	443	49761	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.156896114 CEST	49761	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.156903028 CEST	443	49761	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.180984974 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.181662083 CEST	49763	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.181679010 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.184098959 CEST	49763	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.184117079 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.230436087 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.230509043 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.230596066 CEST	49760	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.231343031 CEST	49760	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.231362104 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.231374979 CEST	49760	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.231384039 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.236970901 CEST	49765	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.237016916 CEST	443	49765	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.237102032 CEST	49765	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.237597942 CEST	49765	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.237612009 CEST	443	49765	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.271481991 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.271584988 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.271646976 CEST	49762	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.272197962 CEST	49762	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.272219896 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.272231102 CEST	49762	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.272239923 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.282131910 CEST	49766	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.282196999 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.282268047 CEST	49766	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.282655954 CEST	49766	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.282672882 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.286353111 CEST	443	49761	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.286602974 CEST	443	49761	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.286670923 CEST	49761	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.286881924 CEST	49761	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.286900997 CEST	443	49761	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.295573950 CEST	49767	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.295634985 CEST	443	49767	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.295711994 CEST	49767	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.296046972 CEST	49767	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.296065092 CEST	443	49767	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.320806980 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.320905924 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.320983887 CEST	49763	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.321816921 CEST	49763	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.321846008 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.321871042 CEST	49763	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.321887970 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.330285072 CEST	49768	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.330321074 CEST	443	49768	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.330421925 CEST	49768	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.330890894 CEST	49768	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.330899954 CEST	443	49768	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.871072054 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.877758026 CEST	49764	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.877795935 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.884718895 CEST	49764	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.884732008 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.981102943 CEST	443	49765	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.981823921 CEST	49765	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.981873035 CEST	443	49765	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:11.982286930 CEST	49765	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:11.982295036 CEST	443	49765	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.015695095 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.015770912 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.015831947 CEST	49764	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.016092062 CEST	49764	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.016117096 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.016129017 CEST	49764	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.016134977 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.019921064 CEST	49769	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.019962072 CEST	443	49769	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.020034075 CEST	49769	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.020273924 CEST	49769	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.020287991 CEST	443	49769	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.026742935 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.027281046 CEST	49766	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.027303934 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.027896881 CEST	49766	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.027903080 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.043626070 CEST	443	49767	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.044403076 CEST	49767	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.044440031 CEST	443	49767	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.045062065 CEST	49767	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.045069933 CEST	443	49767	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.061845064 CEST	443	49768	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.063215971 CEST	49768	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.063232899 CEST	443	49768	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.063865900 CEST	49768	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.063870907 CEST	443	49768	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.130172014 CEST	443	49765	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.130431890 CEST	443	49765	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.130503893 CEST	49765	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.131359100 CEST	49765	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.131386995 CEST	443	49765	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.131403923 CEST	49765	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.131412029 CEST	443	49765	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.141012907 CEST	49770	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.141045094 CEST	443	49770	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.141172886 CEST	49770	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.141462088 CEST	49770	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.141472101 CEST	443	49770	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.159917116 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.159995079 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.160060883 CEST	49766	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.160576105 CEST	49766	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.160604000 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.160615921 CEST	49766	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.160623074 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.169636011 CEST	49771	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.169687033 CEST	443	49771	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.169764996 CEST	49771	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.170358896 CEST	49771	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.170375109 CEST	443	49771	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.174673080 CEST	443	49767	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.174756050 CEST	443	49767	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.174815893 CEST	49767	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.175345898 CEST	49767	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.175347090 CEST	49767	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.175369978 CEST	443	49767	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.175379992 CEST	443	49767	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.182585955 CEST	49772	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.182626963 CEST	443	49772	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.182704926 CEST	49772	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.183001041 CEST	49772	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.183012009 CEST	443	49772	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.192722082 CEST	443	49768	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.193093061 CEST	443	49768	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.193186045 CEST	49768	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.194349051 CEST	49768	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.194349051 CEST	49768	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.194365025 CEST	443	49768	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.194377899 CEST	443	49768	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.202977896 CEST	49773	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.203032970 CEST	443	49773	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.203120947 CEST	49773	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.203464031 CEST	49773	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.203485966 CEST	443	49773	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.743980885 CEST	443	49769	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.778181076 CEST	49769	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.778215885 CEST	443	49769	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.778951883 CEST	49769	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.778959036 CEST	443	49769	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.864470959 CEST	443	49770	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.892462015 CEST	49770	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.892498016 CEST	443	49770	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.893610954 CEST	49770	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.893616915 CEST	443	49770	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.902858019 CEST	443	49769	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.903143883 CEST	443	49769	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.903248072 CEST	49769	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.903477907 CEST	49769	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.903502941 CEST	443	49769	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.903517962 CEST	49769	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.903525114 CEST	443	49769	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.911024094 CEST	49774	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.911063910 CEST	443	49774	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.911292076 CEST	49774	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.911562920 CEST	49774	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.911580086 CEST	443	49774	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.919109106 CEST	443	49771	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.919689894 CEST	49771	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.919729948 CEST	443	49771	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.920428038 CEST	49771	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.920447111 CEST	443	49771	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.935096025 CEST	443	49773	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.935992956 CEST	49773	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.936021090 CEST	443	49773	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.937091112 CEST	49773	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.937098026 CEST	443	49773	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.950453043 CEST	443	49772	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.955804110 CEST	49772	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.955835104 CEST	443	49772	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:12.956541061 CEST	49772	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:12.956562042 CEST	443	49772	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.017433882 CEST	443	49770	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.017729998 CEST	443	49770	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.017805099 CEST	49770	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.019862890 CEST	49770	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.019880056 CEST	443	49770	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.019893885 CEST	49770	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.019901037 CEST	443	49770	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.032455921 CEST	49775	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.032496929 CEST	443	49775	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.032718897 CEST	49775	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.033236980 CEST	49775	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.033255100 CEST	443	49775	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.052836895 CEST	443	49771	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.053445101 CEST	443	49771	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.053509951 CEST	49771	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.054579020 CEST	49771	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.054596901 CEST	443	49771	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.067915916 CEST	443	49773	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.068077087 CEST	443	49773	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.068217039 CEST	49773	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.068840027 CEST	49773	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.068862915 CEST	443	49773	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.068873882 CEST	49773	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.068881989 CEST	443	49773	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.073863029 CEST	49776	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.073916912 CEST	443	49776	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.073992968 CEST	49776	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.074218035 CEST	49776	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.074232101 CEST	443	49776	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.075824022 CEST	49777	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.075861931 CEST	443	49777	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.075926065 CEST	49777	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.076261997 CEST	49777	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.076273918 CEST	443	49777	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.088427067 CEST	443	49772	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.088560104 CEST	443	49772	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.088972092 CEST	49772	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.088972092 CEST	49772	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.088972092 CEST	49772	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.091969013 CEST	49778	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.092019081 CEST	443	49778	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.092103004 CEST	49778	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.092242002 CEST	49778	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.092253923 CEST	443	49778	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.288440943 CEST	49779	443	192.168.2.5	52.149.20.212
Oct 25, 2024 15:36:13.288485050 CEST	443	49779	52.149.20.212	192.168.2.5
Oct 25, 2024 15:36:13.288564920 CEST	49779	443	192.168.2.5	52.149.20.212
Oct 25, 2024 15:36:13.295223951 CEST	49779	443	192.168.2.5	52.149.20.212
Oct 25, 2024 15:36:13.295237064 CEST	443	49779	52.149.20.212	192.168.2.5
Oct 25, 2024 15:36:13.400736094 CEST	49772	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.400753975 CEST	443	49772	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.795511007 CEST	443	49774	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.796235085 CEST	49774	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.796252966 CEST	443	49774	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.797010899 CEST	49774	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.797036886 CEST	443	49774	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.923310041 CEST	443	49775	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.924051046 CEST	49775	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.924083948 CEST	443	49775	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.924683094 CEST	49775	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.924701929 CEST	443	49775	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.924712896 CEST	443	49778	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.925556898 CEST	49778	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.925584078 CEST	443	49778	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.925735950 CEST	443	49774	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.925787926 CEST	49778	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.925802946 CEST	443	49778	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.925911903 CEST	443	49774	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.925985098 CEST	49774	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.926040888 CEST	49774	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.926040888 CEST	49774	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.926058054 CEST	443	49774	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.926067114 CEST	443	49774	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.926125050 CEST	443	49777	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.926785946 CEST	49777	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.926809072 CEST	443	49777	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.927242994 CEST	49777	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.927248001 CEST	443	49777	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.929369926 CEST	49781	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.929435968 CEST	443	49781	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.929512024 CEST	49781	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.929945946 CEST	49781	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.929960966 CEST	443	49781	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.931128979 CEST	443	49776	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.932554007 CEST	49776	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.932569027 CEST	443	49776	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:13.932925940 CEST	49776	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:13.932931900 CEST	443	49776	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.053297043 CEST	443	49775	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.053822994 CEST	443	49775	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.053884029 CEST	49775	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.053925037 CEST	49775	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.053945065 CEST	443	49775	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.053956032 CEST	49775	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.053961992 CEST	443	49775	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.054006100 CEST	443	49778	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.054121017 CEST	443	49778	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.054176092 CEST	49778	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.055897951 CEST	49778	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.055917978 CEST	443	49778	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.055953026 CEST	49778	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.055959940 CEST	443	49778	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.058558941 CEST	443	49777	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.059283972 CEST	443	49777	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.059351921 CEST	49777	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.059984922 CEST	49782	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.060020924 CEST	443	49782	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.060090065 CEST	49782	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.060168028 CEST	49777	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.060168028 CEST	49777	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.060180902 CEST	443	49777	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.060190916 CEST	443	49777	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.061117887 CEST	49782	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.061136007 CEST	443	49782	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.062810898 CEST	49783	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.062844992 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.063003063 CEST	49783	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.063137054 CEST	49783	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.063149929 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.064392090 CEST	49784	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.064434052 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.064496994 CEST	49784	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.064698935 CEST	49784	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.064717054 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.068625927 CEST	443	49776	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.068903923 CEST	443	49776	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.068977118 CEST	49776	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.069037914 CEST	49776	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.069046974 CEST	443	49776	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.069058895 CEST	49776	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.069063902 CEST	443	49776	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.071412086 CEST	49785	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.071429968 CEST	443	49785	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.071482897 CEST	49785	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.071602106 CEST	49785	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.071614981 CEST	443	49785	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.204713106 CEST	443	49779	52.149.20.212	192.168.2.5
Oct 25, 2024 15:36:14.204792976 CEST	49779	443	192.168.2.5	52.149.20.212
Oct 25, 2024 15:36:14.208686113 CEST	49779	443	192.168.2.5	52.149.20.212
Oct 25, 2024 15:36:14.208693027 CEST	443	49779	52.149.20.212	192.168.2.5
Oct 25, 2024 15:36:14.208975077 CEST	443	49779	52.149.20.212	192.168.2.5
Oct 25, 2024 15:36:14.259891033 CEST	49779	443	192.168.2.5	52.149.20.212
Oct 25, 2024 15:36:14.570854902 CEST	49779	443	192.168.2.5	52.149.20.212
Oct 25, 2024 15:36:14.579624891 CEST	49709	443	192.168.2.5	23.1.237.91
Oct 25, 2024 15:36:14.579782009 CEST	49709	443	192.168.2.5	23.1.237.91
Oct 25, 2024 15:36:14.580152988 CEST	49786	443	192.168.2.5	23.1.237.91
Oct 25, 2024 15:36:14.580210924 CEST	443	49786	23.1.237.91	192.168.2.5
Oct 25, 2024 15:36:14.580287933 CEST	49786	443	192.168.2.5	23.1.237.91
Oct 25, 2024 15:36:14.580610037 CEST	49786	443	192.168.2.5	23.1.237.91
Oct 25, 2024 15:36:14.580630064 CEST	443	49786	23.1.237.91	192.168.2.5
Oct 25, 2024 15:36:14.585032940 CEST	443	49709	23.1.237.91	192.168.2.5
Oct 25, 2024 15:36:14.585350037 CEST	443	49709	23.1.237.91	192.168.2.5
Oct 25, 2024 15:36:14.611355066 CEST	443	49779	52.149.20.212	192.168.2.5
Oct 25, 2024 15:36:14.655919075 CEST	443	49781	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.656586885 CEST	49781	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.656601906 CEST	443	49781	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.657388926 CEST	49781	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.657393932 CEST	443	49781	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.785295963 CEST	443	49781	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.785368919 CEST	443	49781	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.785439014 CEST	49781	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.786760092 CEST	49781	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.786760092 CEST	49781	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.786776066 CEST	443	49781	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.786787987 CEST	443	49781	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.792747021 CEST	49787	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.792789936 CEST	443	49787	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.792876005 CEST	49787	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.793098927 CEST	49787	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.793109894 CEST	443	49787	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.815398932 CEST	443	49782	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.816270113 CEST	49782	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.816293001 CEST	443	49782	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.817238092 CEST	49782	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.817245007 CEST	443	49782	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.822467089 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.839199066 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.839428902 CEST	443	49785	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.841871977 CEST	49783	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.841911077 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.842828989 CEST	49783	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.842833996 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.843612909 CEST	49784	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.843655109 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.844363928 CEST	49784	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.844381094 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.844836950 CEST	49785	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.844862938 CEST	443	49785	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.845638037 CEST	49785	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.845647097 CEST	443	49785	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.866153955 CEST	443	49779	52.149.20.212	192.168.2.5
Oct 25, 2024 15:36:14.866178989 CEST	443	49779	52.149.20.212	192.168.2.5
Oct 25, 2024 15:36:14.866188049 CEST	443	49779	52.149.20.212	192.168.2.5
Oct 25, 2024 15:36:14.866200924 CEST	443	49779	52.149.20.212	192.168.2.5
Oct 25, 2024 15:36:14.866240025 CEST	443	49779	52.149.20.212	192.168.2.5
Oct 25, 2024 15:36:14.866266966 CEST	49779	443	192.168.2.5	52.149.20.212
Oct 25, 2024 15:36:14.866285086 CEST	443	49779	52.149.20.212	192.168.2.5
Oct 25, 2024 15:36:14.866326094 CEST	49779	443	192.168.2.5	52.149.20.212
Oct 25, 2024 15:36:14.866333961 CEST	49779	443	192.168.2.5	52.149.20.212
Oct 25, 2024 15:36:14.866569996 CEST	443	49779	52.149.20.212	192.168.2.5
Oct 25, 2024 15:36:14.866631031 CEST	49779	443	192.168.2.5	52.149.20.212
Oct 25, 2024 15:36:14.866637945 CEST	443	49779	52.149.20.212	192.168.2.5
Oct 25, 2024 15:36:14.867266893 CEST	443	49779	52.149.20.212	192.168.2.5
Oct 25, 2024 15:36:14.867337942 CEST	49779	443	192.168.2.5	52.149.20.212
Oct 25, 2024 15:36:14.890933990 CEST	49779	443	192.168.2.5	52.149.20.212
Oct 25, 2024 15:36:14.890952110 CEST	443	49779	52.149.20.212	192.168.2.5
Oct 25, 2024 15:36:14.890965939 CEST	49779	443	192.168.2.5	52.149.20.212
Oct 25, 2024 15:36:14.890974045 CEST	443	49779	52.149.20.212	192.168.2.5
Oct 25, 2024 15:36:14.946897984 CEST	443	49782	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.946975946 CEST	443	49782	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.947202921 CEST	49782	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.949362993 CEST	49782	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.949383974 CEST	443	49782	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.968034983 CEST	49788	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.968103886 CEST	443	49788	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.968293905 CEST	49788	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.968899012 CEST	49788	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.968916893 CEST	443	49788	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.970931053 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.970998049 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.971087933 CEST	49783	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.971185923 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.971254110 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.971319914 CEST	49784	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.971523046 CEST	49783	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.971523046 CEST	49783	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.971539021 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.971559048 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.971656084 CEST	49784	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.971673012 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.971689939 CEST	49784	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.971695900 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.976603985 CEST	443	49785	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.976821899 CEST	443	49785	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.976903915 CEST	49785	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.977720022 CEST	49785	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.977720022 CEST	49785	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:14.977731943 CEST	443	49785	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:14.977741003 CEST	443	49785	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.009582996 CEST	49789	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.009634018 CEST	443	49789	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.009852886 CEST	49789	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.026516914 CEST	49789	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.026546955 CEST	443	49789	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.053514957 CEST	49790	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.053559065 CEST	443	49790	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.053658009 CEST	49790	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.075438976 CEST	49791	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.075496912 CEST	443	49791	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.075567007 CEST	49791	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.075942039 CEST	49790	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.075968027 CEST	443	49790	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.077091932 CEST	49791	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.077110052 CEST	443	49791	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.279999018 CEST	443	49786	23.1.237.91	192.168.2.5
Oct 25, 2024 15:36:15.280076027 CEST	49786	443	192.168.2.5	23.1.237.91
Oct 25, 2024 15:36:15.396296978 CEST	49786	443	192.168.2.5	23.1.237.91
Oct 25, 2024 15:36:15.396334887 CEST	443	49786	23.1.237.91	192.168.2.5
Oct 25, 2024 15:36:15.396699905 CEST	443	49786	23.1.237.91	192.168.2.5
Oct 25, 2024 15:36:15.396811008 CEST	49786	443	192.168.2.5	23.1.237.91
Oct 25, 2024 15:36:15.399370909 CEST	49786	443	192.168.2.5	23.1.237.91
Oct 25, 2024 15:36:15.399403095 CEST	443	49786	23.1.237.91	192.168.2.5
Oct 25, 2024 15:36:15.402874947 CEST	49786	443	192.168.2.5	23.1.237.91
Oct 25, 2024 15:36:15.402884007 CEST	443	49786	23.1.237.91	192.168.2.5
Oct 25, 2024 15:36:15.517260075 CEST	443	49787	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.566150904 CEST	49787	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.566178083 CEST	443	49787	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.570067883 CEST	49787	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.570077896 CEST	443	49787	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.613920927 CEST	443	49786	23.1.237.91	192.168.2.5
Oct 25, 2024 15:36:15.614154100 CEST	49786	443	192.168.2.5	23.1.237.91
Oct 25, 2024 15:36:15.614748001 CEST	443	49786	23.1.237.91	192.168.2.5
Oct 25, 2024 15:36:15.614808083 CEST	49786	443	192.168.2.5	23.1.237.91
Oct 25, 2024 15:36:15.614820004 CEST	443	49786	23.1.237.91	192.168.2.5
Oct 25, 2024 15:36:15.614866972 CEST	49786	443	192.168.2.5	23.1.237.91
Oct 25, 2024 15:36:15.615844965 CEST	49786	443	192.168.2.5	23.1.237.91
Oct 25, 2024 15:36:15.615869045 CEST	443	49786	23.1.237.91	192.168.2.5
Oct 25, 2024 15:36:15.615888119 CEST	49786	443	192.168.2.5	23.1.237.91
Oct 25, 2024 15:36:15.616003036 CEST	49786	443	192.168.2.5	23.1.237.91
Oct 25, 2024 15:36:15.692931890 CEST	443	49787	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.693155050 CEST	443	49787	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.693239927 CEST	49787	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.693718910 CEST	49787	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.693737984 CEST	443	49787	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.702653885 CEST	49792	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.702713013 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.702836037 CEST	49792	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.703481913 CEST	49792	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.703495979 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.715502977 CEST	443	49788	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.716187954 CEST	49788	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.716238976 CEST	443	49788	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.716629028 CEST	49788	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.716645956 CEST	443	49788	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.767334938 CEST	443	49789	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.768589020 CEST	49789	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.768621922 CEST	443	49789	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.769552946 CEST	49789	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.769560099 CEST	443	49789	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.832778931 CEST	443	49791	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.833420038 CEST	49791	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.833472967 CEST	443	49791	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.834316969 CEST	49791	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.834323883 CEST	443	49791	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.849723101 CEST	443	49788	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.849812984 CEST	443	49788	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.849976063 CEST	49788	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.850259066 CEST	49788	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.850281000 CEST	443	49788	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.850298882 CEST	49788	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.850306988 CEST	443	49788	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.864168882 CEST	443	49790	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.871510983 CEST	49793	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.871531963 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.871629953 CEST	49793	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.871786118 CEST	49793	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.871797085 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.873032093 CEST	49790	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.873074055 CEST	443	49790	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.873878956 CEST	49790	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.873888969 CEST	443	49790	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.903546095 CEST	443	49789	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.903620005 CEST	443	49789	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.903984070 CEST	49789	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.904159069 CEST	49789	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.904184103 CEST	443	49789	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.904197931 CEST	49789	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.904206991 CEST	443	49789	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.907627106 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.907659054 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.907744884 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.908160925 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.908190966 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.965646982 CEST	443	49791	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.965714931 CEST	443	49791	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.965958118 CEST	49791	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.970151901 CEST	49791	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.970191956 CEST	443	49791	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.970208883 CEST	49791	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.970217943 CEST	443	49791	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.975814104 CEST	49795	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.975868940 CEST	443	49795	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:15.975955009 CEST	49795	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.976279020 CEST	49795	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:15.976294994 CEST	443	49795	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.000425100 CEST	443	49790	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.000504971 CEST	443	49790	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.000638008 CEST	49790	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.001070976 CEST	49790	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.001096964 CEST	443	49790	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.001111031 CEST	49790	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.001116991 CEST	443	49790	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.005242109 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.005283117 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.005585909 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.006083965 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.006104946 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.278301001 CEST	443	49735	142.250.186.164	192.168.2.5
Oct 25, 2024 15:36:16.278467894 CEST	443	49735	142.250.186.164	192.168.2.5
Oct 25, 2024 15:36:16.278570890 CEST	49735	443	192.168.2.5	142.250.186.164
Oct 25, 2024 15:36:16.453102112 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.454042912 CEST	49792	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.454128981 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.454560995 CEST	49792	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.454577923 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.581764936 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.582154989 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.582240105 CEST	49792	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.582295895 CEST	49792	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.582320929 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.582331896 CEST	49792	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.582338095 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.585516930 CEST	49797	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.585558891 CEST	443	49797	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.585632086 CEST	49797	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.586038113 CEST	49797	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.586052895 CEST	443	49797	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.590359926 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.590850115 CEST	49793	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.590871096 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.591389894 CEST	49793	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.591394901 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.643040895 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.644515038 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.644551039 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.646162987 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.646176100 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.707983017 CEST	443	49795	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.708754063 CEST	49795	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.708786964 CEST	443	49795	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.710069895 CEST	49795	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.710076094 CEST	443	49795	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.719331026 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.719607115 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.719662905 CEST	49793	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.720247984 CEST	49793	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.720261097 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.720313072 CEST	49793	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.720319033 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.726742983 CEST	49798	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.726802111 CEST	443	49798	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.726896048 CEST	49798	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.727452993 CEST	49798	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.727471113 CEST	443	49798	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.776982069 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.777242899 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.777306080 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.777641058 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.777650118 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.777662992 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.777668953 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.778563023 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.779223919 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.779242992 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.779737949 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.779745102 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.781367064 CEST	49799	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.781419992 CEST	443	49799	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.781505108 CEST	49799	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.781716108 CEST	49799	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.781733990 CEST	443	49799	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.838526964 CEST	443	49795	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.838988066 CEST	443	49795	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.839095116 CEST	49795	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.839164019 CEST	49795	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.839174986 CEST	443	49795	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.839209080 CEST	49795	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.839214087 CEST	443	49795	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.842215061 CEST	49800	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.842250109 CEST	443	49800	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.842323065 CEST	49800	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.842468977 CEST	49800	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.842483997 CEST	443	49800	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.915051937 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.915349007 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.915426016 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.916547060 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.916569948 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.916580915 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.916588068 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.919709921 CEST	49801	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.919743061 CEST	443	49801	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:16.919819117 CEST	49801	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.920032024 CEST	49801	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:16.920043945 CEST	443	49801	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:17.328274965 CEST	443	49797	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:17.328797102 CEST	49797	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:17.328845024 CEST	443	49797	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:17.329427004 CEST	49797	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:17.329433918 CEST	443	49797	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:17.461055040 CEST	443	49797	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:17.461203098 CEST	443	49797	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:17.461345911 CEST	49797	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:17.461433887 CEST	49797	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:17.461457968 CEST	443	49797	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:17.461472034 CEST	49797	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:17.461478949 CEST	443	49797	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:17.465152025 CEST	49802	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:17.465198040 CEST	443	49802	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:17.465296984 CEST	49802	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:17.465468884 CEST	49802	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:17.465482950 CEST	443	49802	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:17.470177889 CEST	443	49798	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:17.470643044 CEST	49798	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:17.470666885 CEST	443	49798	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:17.471198082 CEST	49798	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:17.471204996 CEST	443	49798	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:17.596918106 CEST	443	49798	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:17.597064018 CEST	443	49798	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:17.597119093 CEST	49798	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:17.597345114 CEST	49798	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:17.597363949 CEST	443	49798	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:17.597373009 CEST	49798	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:17.597378969 CEST	443	49798	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:17.601222992 CEST	49803	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:17.601257086 CEST	443	49803	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:17.601341963 CEST	49803	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:17.601515055 CEST	49803	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:17.601526976 CEST	443	49803	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:17.619541883 CEST	443	49800	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:17.620368958 CEST	49800	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:17.620394945 CEST	443	49800	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:17.620908022 CEST	49800	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:17.620917082 CEST	443	49800	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:17.648912907 CEST	443	49801	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:17.650341034 CEST	49801	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:17.650357008 CEST	443	49801	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:17.650945902 CEST	49801	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:17.650950909 CEST	443	49801	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:17.759059906 CEST	443	49800	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:17.759437084 CEST	443	49800	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:17.759499073 CEST	49800	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:17.760500908 CEST	49800	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:17.760515928 CEST	443	49800	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:17.760529041 CEST	49800	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:17.760535002 CEST	443	49800	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:17.764080048 CEST	49804	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:17.764110088 CEST	443	49804	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:17.764175892 CEST	49804	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:17.764446974 CEST	49804	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:17.764462948 CEST	443	49804	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:17.782537937 CEST	443	49801	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:17.782675982 CEST	443	49801	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:17.782898903 CEST	49801	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:17.783126116 CEST	49801	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:17.783139944 CEST	443	49801	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:17.786258936 CEST	49805	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:17.786288977 CEST	443	49805	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:17.786499023 CEST	49805	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:17.786695004 CEST	49805	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:17.786700964 CEST	443	49805	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.187254906 CEST	49735	443	192.168.2.5	142.250.186.164
Oct 25, 2024 15:36:18.187287092 CEST	443	49735	142.250.186.164	192.168.2.5
Oct 25, 2024 15:36:18.209743023 CEST	443	49802	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.210289001 CEST	49802	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.210319996 CEST	443	49802	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.210876942 CEST	49802	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.210882902 CEST	443	49802	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.341634989 CEST	443	49802	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.342735052 CEST	443	49802	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.342797995 CEST	49802	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.342835903 CEST	49802	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.342860937 CEST	443	49802	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.342873096 CEST	49802	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.342879057 CEST	443	49802	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.345793009 CEST	49806	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.345846891 CEST	443	49806	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.345921993 CEST	49806	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.346118927 CEST	49806	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.346137047 CEST	443	49806	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.355351925 CEST	443	49803	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.355854034 CEST	49803	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.355879068 CEST	443	49803	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.356302023 CEST	49803	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.356313944 CEST	443	49803	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.500715971 CEST	443	49804	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.501291037 CEST	49804	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.501351118 CEST	443	49804	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.501758099 CEST	49804	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.501769066 CEST	443	49804	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.520618916 CEST	443	49805	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.521264076 CEST	49805	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.521272898 CEST	443	49805	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.521764040 CEST	49805	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.521768093 CEST	443	49805	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.521898031 CEST	443	49803	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.521998882 CEST	443	49803	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.522073984 CEST	49803	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.522142887 CEST	49803	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.522159100 CEST	443	49803	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.522169113 CEST	49803	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.522175074 CEST	443	49803	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.525046110 CEST	49807	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.525074005 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.525187969 CEST	49807	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.525479078 CEST	49807	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.525490999 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.581309080 CEST	443	49799	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.581871986 CEST	49799	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.581933975 CEST	443	49799	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.582345963 CEST	49799	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.582351923 CEST	443	49799	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.632400990 CEST	443	49804	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.632456064 CEST	443	49804	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.632522106 CEST	49804	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.632760048 CEST	49804	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.632783890 CEST	443	49804	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.632797956 CEST	49804	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.632803917 CEST	443	49804	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.636918068 CEST	49808	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.636945009 CEST	443	49808	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.637037039 CEST	49808	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.637464046 CEST	49808	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.637476921 CEST	443	49808	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.651643991 CEST	443	49805	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.652096987 CEST	443	49805	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.652148008 CEST	49805	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.652384043 CEST	49805	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.652384043 CEST	49805	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.652416945 CEST	443	49805	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.652425051 CEST	443	49805	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.654735088 CEST	49809	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.654772043 CEST	443	49809	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.654944897 CEST	49809	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.655076981 CEST	49809	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.655091047 CEST	443	49809	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.711211920 CEST	443	49799	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.711410046 CEST	443	49799	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.711503029 CEST	49799	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.711597919 CEST	49799	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.711630106 CEST	443	49799	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.711646080 CEST	49799	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.711654902 CEST	443	49799	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.714186907 CEST	49810	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.714221001 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:18.714526892 CEST	49810	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.714679003 CEST	49810	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:18.714690924 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.084542990 CEST	443	49806	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.085057974 CEST	49806	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.085088968 CEST	443	49806	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.085536003 CEST	49806	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.085541964 CEST	443	49806	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.217617989 CEST	443	49806	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.217683077 CEST	443	49806	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.217772007 CEST	49806	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.217983961 CEST	49806	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.217983961 CEST	49806	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.218005896 CEST	443	49806	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.218017101 CEST	443	49806	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.221088886 CEST	49811	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.221127987 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.221276999 CEST	49811	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.221462011 CEST	49811	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.221486092 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.263009071 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.267292976 CEST	49807	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.267334938 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.267919064 CEST	49807	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.267927885 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.294275999 CEST	49812	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:19.294322014 CEST	443	49812	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:19.294449091 CEST	49812	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:19.295203924 CEST	49812	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:19.295219898 CEST	443	49812	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:19.298523903 CEST	49813	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:19.298580885 CEST	443	49813	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:19.298749924 CEST	49813	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:19.299408913 CEST	49813	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:19.299444914 CEST	443	49813	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:19.391798973 CEST	443	49808	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.392344952 CEST	49808	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.392365932 CEST	443	49808	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.392807007 CEST	49808	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.392812014 CEST	443	49808	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.395452023 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.395534039 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.395704985 CEST	49807	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.395761013 CEST	49807	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.395761013 CEST	49807	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.395780087 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.395790100 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.398680925 CEST	49814	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.398710012 CEST	443	49814	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.398844004 CEST	49814	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.398931980 CEST	49814	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.398942947 CEST	443	49814	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.399068117 CEST	443	49809	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.399573088 CEST	49809	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.399590015 CEST	443	49809	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.399985075 CEST	49809	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.399991989 CEST	443	49809	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.516850948 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.517375946 CEST	49810	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.517388105 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.517946959 CEST	49810	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.517951965 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.522166967 CEST	443	49808	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.522226095 CEST	443	49808	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.522289991 CEST	49808	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.522511959 CEST	49808	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.522526979 CEST	443	49808	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.522536993 CEST	49808	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.522543907 CEST	443	49808	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.525701046 CEST	49815	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.525774956 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.525939941 CEST	49815	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.526055098 CEST	49815	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.526077032 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.588926077 CEST	443	49809	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.589032888 CEST	443	49809	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.589143038 CEST	49809	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.589906931 CEST	49809	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.589927912 CEST	443	49809	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.590281963 CEST	49809	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.590291977 CEST	443	49809	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.596627951 CEST	49816	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.596657991 CEST	443	49816	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.596756935 CEST	49816	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.599253893 CEST	49816	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.599267960 CEST	443	49816	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.649003983 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.649101019 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.649158955 CEST	49810	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.649302959 CEST	49810	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.649321079 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.652340889 CEST	49817	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.652396917 CEST	443	49817	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.652518988 CEST	49817	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.652710915 CEST	49817	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.652728081 CEST	443	49817	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.996983051 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.997555017 CEST	49811	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.997566938 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:19.998090982 CEST	49811	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:19.998095989 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.129827976 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.129992962 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.130065918 CEST	49811	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.130204916 CEST	49811	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.130224943 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.130253077 CEST	49811	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.130259991 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.133162022 CEST	49818	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.133196115 CEST	443	49818	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.133368969 CEST	49818	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.133562088 CEST	49818	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.133574963 CEST	443	49818	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.133820057 CEST	443	49814	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.134252071 CEST	49814	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.134278059 CEST	443	49814	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.134660006 CEST	49814	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.134677887 CEST	443	49814	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.262275934 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.262790918 CEST	49815	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.262823105 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.263287067 CEST	49815	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.263348103 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.271784067 CEST	443	49814	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.272222042 CEST	443	49814	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.272315025 CEST	49814	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.272377014 CEST	49814	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.272377014 CEST	49814	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.272402048 CEST	443	49814	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.272423983 CEST	443	49814	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.274935007 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.274981976 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.275055885 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.275233984 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.275249004 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.344780922 CEST	443	49816	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.345284939 CEST	49816	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.345313072 CEST	443	49816	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.345978022 CEST	49816	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.345983982 CEST	443	49816	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.403093100 CEST	443	49817	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.403645992 CEST	49817	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.403693914 CEST	443	49817	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.404107094 CEST	49817	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.404119968 CEST	443	49817	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.406024933 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.406104088 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.406282902 CEST	49815	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.406323910 CEST	49815	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.406343937 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.406398058 CEST	49815	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.406404972 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.409188986 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.409238100 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.409316063 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.409468889 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.409487009 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.482609987 CEST	443	49816	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.482664108 CEST	443	49816	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.482814074 CEST	49816	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.482918978 CEST	49816	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.482942104 CEST	443	49816	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.482958078 CEST	49816	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.482965946 CEST	443	49816	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.483786106 CEST	443	49813	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:20.483886957 CEST	49813	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:20.484087944 CEST	443	49812	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:20.484158993 CEST	49812	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:20.485954046 CEST	49812	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:20.485977888 CEST	443	49812	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:20.485997915 CEST	49813	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:20.486011028 CEST	443	49813	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:20.486223936 CEST	443	49812	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:20.486246109 CEST	443	49813	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:20.487998962 CEST	49813	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:20.488055944 CEST	49812	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:20.488189936 CEST	49813	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:20.488197088 CEST	443	49813	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:20.488291979 CEST	49813	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:20.488332033 CEST	49812	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:20.488343954 CEST	443	49812	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:20.488460064 CEST	49812	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:20.489746094 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.489784956 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.489895105 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.490051031 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.490066051 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.534287930 CEST	443	49817	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.534348011 CEST	443	49817	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.534403086 CEST	49817	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.534692049 CEST	49817	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.534714937 CEST	443	49817	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.534729958 CEST	49817	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.534735918 CEST	443	49817	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.535332918 CEST	443	49812	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:20.535351992 CEST	443	49813	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:20.537399054 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.537439108 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.537672997 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.537843943 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.537858963 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.736547947 CEST	443	49813	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:20.737065077 CEST	49813	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:20.737091064 CEST	443	49813	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:20.737112045 CEST	49813	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:20.737148046 CEST	49813	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:20.739340067 CEST	443	49812	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:20.739785910 CEST	49812	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:20.739809036 CEST	443	49812	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:20.739871979 CEST	49812	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:20.739871979 CEST	49812	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:20.877022028 CEST	443	49818	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.877579927 CEST	49818	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.877588987 CEST	443	49818	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:20.878098011 CEST	49818	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:20.878103018 CEST	443	49818	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.009324074 CEST	443	49818	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.009491920 CEST	443	49818	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.009803057 CEST	49818	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.009902954 CEST	49818	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.009910107 CEST	443	49818	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.009928942 CEST	49818	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.009934902 CEST	443	49818	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.013062954 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.013250113 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.013303995 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.013396978 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.013596058 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.013636112 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.014045000 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.014058113 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.014286995 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.014302969 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.139091969 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.139616013 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.139650106 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.140100956 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.140106916 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.144221067 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.144553900 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.144617081 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.144656897 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.144678116 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.144686937 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.144694090 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.147588015 CEST	49824	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.147622108 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.147741079 CEST	49824	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.147949934 CEST	49824	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.147964001 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.234607935 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.235151052 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.235166073 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.235827923 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.235833883 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.270677090 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.271352053 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.271385908 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.271450043 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.271471024 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.271528959 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.271536112 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.271584034 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.271739960 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.271761894 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.271771908 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.271779060 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.272160053 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.272166014 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.276415110 CEST	49825	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.276456118 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.276716948 CEST	49825	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.276875019 CEST	49825	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.276886940 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.366971970 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.367098093 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.367160082 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.367451906 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.367451906 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.367480040 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.367491007 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.371355057 CEST	49826	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.371387959 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.371481895 CEST	49826	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.371664047 CEST	49826	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.371674061 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.403255939 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.403317928 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.403419018 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.403604984 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.403621912 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.403640032 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.403645992 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.406913996 CEST	49827	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.406946898 CEST	443	49827	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.407027006 CEST	49827	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.407186031 CEST	49827	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.407197952 CEST	443	49827	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.752413034 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.753216028 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.753241062 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.753730059 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.753735065 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.883497000 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.883524895 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.883599997 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.883621931 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.883646011 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.883708000 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.884788036 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.884807110 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.884826899 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.884834051 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.888201952 CEST	49828	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.888231993 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.888418913 CEST	49828	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.888783932 CEST	49828	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.888797998 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.897955894 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.898639917 CEST	49824	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.898654938 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:21.899034977 CEST	49824	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:21.899046898 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.024914980 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.027411938 CEST	49825	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.027436018 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.027947903 CEST	49825	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.027954102 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.043376923 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.043428898 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.043502092 CEST	49824	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.043528080 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.043566942 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.043627977 CEST	49824	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.043812990 CEST	49824	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.043828011 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.047543049 CEST	49829	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.047566891 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.047651052 CEST	49829	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.047816992 CEST	49829	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.047830105 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.105065107 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.105528116 CEST	49826	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.105551958 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.106131077 CEST	49826	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.106136084 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.156583071 CEST	443	49827	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.157231092 CEST	49827	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.157258034 CEST	443	49827	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.157776117 CEST	49827	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.157789946 CEST	443	49827	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.167339087 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.167367935 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.167460918 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.167510986 CEST	49825	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.167510986 CEST	49825	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.167768955 CEST	49825	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.167768955 CEST	49825	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.167787075 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.167793989 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.171293020 CEST	49830	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.171329021 CEST	443	49830	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.171403885 CEST	49830	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.171581984 CEST	49830	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.171593904 CEST	443	49830	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.247956038 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.248019934 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.248163939 CEST	49826	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.248353958 CEST	49826	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.248353958 CEST	49826	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.248372078 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.248379946 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.251597881 CEST	49831	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.251655102 CEST	443	49831	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.251740932 CEST	49831	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.251879930 CEST	49831	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.251895905 CEST	443	49831	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.291377068 CEST	443	49827	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.291662931 CEST	443	49827	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.291729927 CEST	49827	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.291821957 CEST	49827	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.291821957 CEST	49827	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.291841984 CEST	443	49827	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.291851997 CEST	443	49827	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.294465065 CEST	49832	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.294503927 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.294795036 CEST	49832	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.294964075 CEST	49832	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.294976950 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.632941961 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.634335041 CEST	49828	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.634361029 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.635011911 CEST	49828	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.635041952 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.773250103 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.778402090 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.778546095 CEST	49828	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.778625965 CEST	49828	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.778642893 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.778719902 CEST	49828	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.778728962 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.782222033 CEST	49833	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.782269955 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.782371044 CEST	49833	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.782525063 CEST	49833	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.782542944 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.813400984 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.814065933 CEST	49829	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.814109087 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.814610958 CEST	49829	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.814620018 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.935530901 CEST	443	49830	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.936388016 CEST	49830	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.936403036 CEST	443	49830	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.936872005 CEST	49830	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.936878920 CEST	443	49830	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.943778992 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.943959951 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.944036007 CEST	49829	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.944127083 CEST	49829	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.944149971 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.947726965 CEST	49834	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.947772026 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.947845936 CEST	49834	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.948013067 CEST	49834	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.948035002 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.993360043 CEST	443	49831	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.994075060 CEST	49831	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.994121075 CEST	443	49831	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:22.994591951 CEST	49831	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:22.994601011 CEST	443	49831	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.052042961 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.052949905 CEST	49832	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.052978039 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.053953886 CEST	49832	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.053967953 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.070363045 CEST	443	49830	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.070440054 CEST	443	49830	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.070724010 CEST	49830	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.070724010 CEST	49830	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.070760012 CEST	49830	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.070777893 CEST	443	49830	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.074269056 CEST	49835	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.074330091 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.074418068 CEST	49835	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.074628115 CEST	49835	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.074645996 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.126089096 CEST	443	49831	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.126172066 CEST	443	49831	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.126396894 CEST	49831	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.126483917 CEST	49831	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.126507044 CEST	443	49831	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.126521111 CEST	49831	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.126527071 CEST	443	49831	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.129980087 CEST	49836	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.130021095 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.130090952 CEST	49836	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.130242109 CEST	49836	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.130259037 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.183655024 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.183734894 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.183810949 CEST	49832	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.184097052 CEST	49832	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.184113026 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.184122086 CEST	49832	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.184128046 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.187603951 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.187685013 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.187805891 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.187948942 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.187985897 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.530730009 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.531626940 CEST	49833	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.531662941 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.532136917 CEST	49833	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.532149076 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.663232088 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.663311005 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.663393021 CEST	49833	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.663737059 CEST	49833	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.663760900 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.663784027 CEST	49833	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.663789988 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.668366909 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.668418884 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.668529034 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.668812037 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.668828964 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.724334955 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.725107908 CEST	49834	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.725137949 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.725676060 CEST	49834	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.725682020 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.814398050 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.815090895 CEST	49835	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.815144062 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.815761089 CEST	49835	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.815768957 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.862972975 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.863630056 CEST	49836	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.863672972 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.864160061 CEST	49836	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.864166975 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.937632084 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.938271046 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.938294888 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.938776970 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.938782930 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.946398020 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.946472883 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.946563959 CEST	49835	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.946722984 CEST	49835	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.946744919 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.946755886 CEST	49835	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.946762085 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.949986935 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.950033903 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.950272083 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.950484991 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.950500011 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.998631954 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.998658895 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.998719931 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.998745918 CEST	49836	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.998815060 CEST	49836	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.999139071 CEST	49836	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.999161959 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:23.999176025 CEST	49836	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:23.999182940 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.002677917 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.002731085 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.002842903 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.003030062 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.003043890 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.072289944 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.072367907 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.072752953 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.073118925 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.073147058 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.073159933 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.073167086 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.078599930 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.078648090 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.078768015 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.082889080 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.082912922 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.087605000 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.088011026 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.088108063 CEST	49834	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.088133097 CEST	49834	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.088150024 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.088160038 CEST	49834	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.088165998 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.091334105 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.091387987 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.091550112 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.091947079 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.091963053 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.391841888 CEST	54947	53	192.168.2.5	1.1.1.1
Oct 25, 2024 15:36:24.397310972 CEST	53	54947	1.1.1.1	192.168.2.5
Oct 25, 2024 15:36:24.397423029 CEST	54947	53	192.168.2.5	1.1.1.1
Oct 25, 2024 15:36:24.397685051 CEST	54947	53	192.168.2.5	1.1.1.1
Oct 25, 2024 15:36:24.401096106 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.401786089 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.401822090 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.402297020 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.402309895 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.403146029 CEST	53	54947	1.1.1.1	192.168.2.5
Oct 25, 2024 15:36:24.531758070 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.532043934 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.532100916 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.532133102 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.532205105 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.532301903 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.532327890 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.532341957 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.532347918 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.536190033 CEST	54948	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.536233902 CEST	443	54948	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.536313057 CEST	54948	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.536530018 CEST	54948	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.536542892 CEST	443	54948	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.706944942 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.708353043 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.708369970 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.709445953 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.709450960 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.742384911 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.771054983 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.771126032 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.772000074 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.772005081 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.822968960 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.823822975 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.823844910 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.824904919 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.824922085 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.833440065 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.834758043 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.834825039 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.836553097 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.836560965 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.839612961 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.839679956 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.839751005 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.840128899 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.840153933 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.847014904 CEST	54949	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.847053051 CEST	443	54949	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.847165108 CEST	54949	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.847336054 CEST	54949	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.847348928 CEST	443	54949	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.899888039 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.899962902 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.900140047 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.900470972 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.900495052 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.900505066 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.900510073 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.907170057 CEST	54950	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.907202005 CEST	443	54950	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.907306910 CEST	54950	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.907731056 CEST	54950	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.907741070 CEST	443	54950	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.954514027 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.954591036 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.954797029 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.955027103 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.955044031 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.955051899 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.955058098 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.959005117 CEST	54951	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.959064007 CEST	443	54951	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.959172010 CEST	54951	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.959460020 CEST	54951	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.959476948 CEST	443	54951	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.965352058 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.966051102 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.966094971 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.966151953 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.966401100 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.966418028 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.966443062 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.966449976 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.969403982 CEST	54952	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.969454050 CEST	443	54952	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:24.969594002 CEST	54952	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.969774008 CEST	54952	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:24.969793081 CEST	443	54952	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.002005100 CEST	53	54947	1.1.1.1	192.168.2.5
Oct 25, 2024 15:36:25.002841949 CEST	54947	53	192.168.2.5	1.1.1.1
Oct 25, 2024 15:36:25.009485006 CEST	53	54947	1.1.1.1	192.168.2.5
Oct 25, 2024 15:36:25.009538889 CEST	54947	53	192.168.2.5	1.1.1.1
Oct 25, 2024 15:36:25.275876999 CEST	443	54948	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.277225971 CEST	54948	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.277235985 CEST	443	54948	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.278399944 CEST	54948	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.278408051 CEST	443	54948	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.411962986 CEST	443	54948	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.412048101 CEST	443	54948	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.412228107 CEST	54948	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.412600040 CEST	54948	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.412600040 CEST	54948	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.412620068 CEST	443	54948	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.412630081 CEST	443	54948	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.423590899 CEST	54954	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.423644066 CEST	443	54954	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.423732996 CEST	54954	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.424067020 CEST	54954	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.424083948 CEST	443	54954	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.573040962 CEST	443	54949	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.574402094 CEST	54949	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.574440956 CEST	443	54949	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.574836969 CEST	54949	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.574842930 CEST	443	54949	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.639226913 CEST	443	54950	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.639758110 CEST	54950	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.639782906 CEST	443	54950	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.640265942 CEST	54950	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.640271902 CEST	443	54950	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.697587013 CEST	443	54951	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.698301077 CEST	54951	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.698326111 CEST	443	54951	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.698786974 CEST	54951	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.698795080 CEST	443	54951	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.701498032 CEST	443	54949	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.701682091 CEST	443	54949	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.701786041 CEST	54949	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.701845884 CEST	54949	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.701847076 CEST	54949	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.701868057 CEST	443	54949	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.701879978 CEST	443	54949	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.705029011 CEST	54955	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.705054998 CEST	443	54952	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.705063105 CEST	443	54955	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.705214024 CEST	54955	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.705365896 CEST	54955	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.705380917 CEST	443	54955	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.705508947 CEST	54952	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.705535889 CEST	443	54952	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.705955982 CEST	54952	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.705961943 CEST	443	54952	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.771282911 CEST	443	54950	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.771542072 CEST	443	54950	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.771657944 CEST	54950	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.771696091 CEST	54950	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.771713018 CEST	443	54950	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.771787882 CEST	54950	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.771795988 CEST	443	54950	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.775367975 CEST	54956	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.775394917 CEST	443	54956	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.775470972 CEST	54956	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.775651932 CEST	54956	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.775664091 CEST	443	54956	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.828217030 CEST	443	54951	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.828248024 CEST	443	54951	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.828291893 CEST	443	54951	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.828306913 CEST	54951	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.828352928 CEST	54951	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.828649044 CEST	54951	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.828669071 CEST	443	54951	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.828681946 CEST	54951	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.828687906 CEST	443	54951	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.832118988 CEST	54957	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.832165956 CEST	443	54957	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.832382917 CEST	54957	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.832575083 CEST	54957	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.832593918 CEST	443	54957	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.836260080 CEST	443	54952	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.836469889 CEST	443	54952	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.836600065 CEST	54952	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.836658955 CEST	54952	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.836673975 CEST	443	54952	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.836685896 CEST	54952	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.836690903 CEST	443	54952	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.839582920 CEST	54958	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.839597940 CEST	443	54958	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:25.839659929 CEST	54958	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.839829922 CEST	54958	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:25.839837074 CEST	443	54958	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.182379007 CEST	443	54954	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.227380991 CEST	54954	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.243932962 CEST	54954	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.243948936 CEST	443	54954	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.246059895 CEST	54954	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.246068001 CEST	443	54954	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.436106920 CEST	443	54954	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.436145067 CEST	443	54954	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.436207056 CEST	443	54954	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.436207056 CEST	54954	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.436252117 CEST	54954	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.456415892 CEST	443	54955	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.508642912 CEST	54955	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.509819984 CEST	443	54956	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.522527933 CEST	54954	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.522567987 CEST	443	54954	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.522586107 CEST	54954	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.522593021 CEST	443	54954	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.526199102 CEST	54955	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.526211977 CEST	443	54955	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.527467012 CEST	54955	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.527473927 CEST	443	54955	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.528290033 CEST	54956	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.528331995 CEST	443	54956	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.528942108 CEST	54956	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.528949022 CEST	443	54956	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.582012892 CEST	443	54957	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.611843109 CEST	54959	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.611882925 CEST	443	54959	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.612114906 CEST	54959	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.612493992 CEST	54957	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.612504959 CEST	443	54957	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.613218069 CEST	54957	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.613224030 CEST	443	54957	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.618438005 CEST	54959	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.618453026 CEST	443	54959	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.655355930 CEST	443	54956	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.655708075 CEST	443	54956	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.655776978 CEST	54956	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.686579943 CEST	54956	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.686599016 CEST	443	54956	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.723202944 CEST	54960	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.723252058 CEST	443	54960	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.723321915 CEST	54960	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.723886013 CEST	54960	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.723902941 CEST	443	54960	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.748117924 CEST	443	54957	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.749103069 CEST	443	54957	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.749164104 CEST	54957	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.777029037 CEST	443	54955	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.777110100 CEST	443	54955	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.777184963 CEST	54955	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.786801100 CEST	443	54958	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.797065020 CEST	54957	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.797080040 CEST	443	54957	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.800147057 CEST	54955	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.800147057 CEST	54955	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.800175905 CEST	443	54955	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.800184965 CEST	443	54955	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.802130938 CEST	54958	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.802144051 CEST	443	54958	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.803306103 CEST	54958	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.803311110 CEST	443	54958	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.860763073 CEST	54961	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.860804081 CEST	443	54961	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.860872030 CEST	54961	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.866545916 CEST	54961	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.866569042 CEST	443	54961	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.868505955 CEST	54962	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.868520021 CEST	443	54962	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.868575096 CEST	54962	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.872716904 CEST	54962	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.872729063 CEST	443	54962	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.929992914 CEST	443	54958	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.930030107 CEST	443	54958	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.930104971 CEST	443	54958	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.930103064 CEST	54958	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.930154085 CEST	54958	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.933592081 CEST	54958	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.933610916 CEST	443	54958	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.946677923 CEST	54963	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.946744919 CEST	443	54963	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:26.946813107 CEST	54963	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.951896906 CEST	54963	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:26.951927900 CEST	443	54963	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.352361917 CEST	443	54959	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.353137970 CEST	54959	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.353173971 CEST	443	54959	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.353651047 CEST	54959	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.353657961 CEST	443	54959	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.460117102 CEST	443	54960	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.460755110 CEST	54960	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.460777044 CEST	443	54960	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.461314917 CEST	54960	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.461322069 CEST	443	54960	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.497184038 CEST	443	54959	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.497525930 CEST	443	54959	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.497711897 CEST	54959	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.497873068 CEST	54959	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.497883081 CEST	443	54959	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.497893095 CEST	54959	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.497898102 CEST	443	54959	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.503376961 CEST	54964	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.503391981 CEST	443	54964	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.503693104 CEST	54964	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.503950119 CEST	54964	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.503964901 CEST	443	54964	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.591351032 CEST	443	54960	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.591423988 CEST	443	54960	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.591483116 CEST	54960	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.599297047 CEST	54960	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.599320889 CEST	443	54960	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.599337101 CEST	54960	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.599343061 CEST	443	54960	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.621157885 CEST	443	54961	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.624772072 CEST	54965	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.624814034 CEST	443	54965	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.625068903 CEST	54965	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.629630089 CEST	54961	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.629652023 CEST	443	54961	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.631158113 CEST	54961	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.631165981 CEST	443	54961	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.631917953 CEST	54965	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.631933928 CEST	443	54965	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.658888102 CEST	443	54962	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.659712076 CEST	54962	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.659750938 CEST	443	54962	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.660739899 CEST	54962	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.660753012 CEST	443	54962	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.694160938 CEST	443	54963	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.696080923 CEST	54963	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.696118116 CEST	443	54963	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.698378086 CEST	54963	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.698384047 CEST	443	54963	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.759888887 CEST	443	54961	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.759985924 CEST	443	54961	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.760098934 CEST	54961	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.760705948 CEST	54961	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.760715008 CEST	443	54961	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.760726929 CEST	54961	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.760730982 CEST	443	54961	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.767237902 CEST	54966	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.767287016 CEST	443	54966	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.767699003 CEST	54966	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.768229961 CEST	54966	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.768254042 CEST	443	54966	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.797902107 CEST	443	54962	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.797938108 CEST	443	54962	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.797991991 CEST	443	54962	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.798012972 CEST	54962	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.798080921 CEST	54962	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.798589945 CEST	54962	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.798589945 CEST	54962	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.798607111 CEST	443	54962	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.798616886 CEST	443	54962	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.805335999 CEST	54967	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.805362940 CEST	443	54967	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.805458069 CEST	54967	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.805694103 CEST	54967	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.805706024 CEST	443	54967	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.879381895 CEST	443	54963	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.879496098 CEST	443	54963	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.879549026 CEST	54963	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.879811049 CEST	54963	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.879827976 CEST	443	54963	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.887651920 CEST	54968	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.887693882 CEST	443	54968	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:27.887870073 CEST	54968	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.888356924 CEST	54968	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:27.888371944 CEST	443	54968	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.235969067 CEST	443	54964	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.289921045 CEST	54964	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.350255966 CEST	54964	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.350284100 CEST	443	54964	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.351531982 CEST	54964	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.351540089 CEST	443	54964	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.363466024 CEST	443	54965	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.368515968 CEST	54965	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.368534088 CEST	443	54965	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.369488955 CEST	54965	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.369496107 CEST	443	54965	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.480480909 CEST	443	54964	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.480551004 CEST	443	54964	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.480648994 CEST	54964	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.482270956 CEST	54964	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.482284069 CEST	443	54964	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.491481066 CEST	443	54966	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.496999025 CEST	443	54965	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.497121096 CEST	443	54965	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.497186899 CEST	54965	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.503870964 CEST	54969	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.503909111 CEST	443	54969	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.504010916 CEST	54969	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.539927006 CEST	54966	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.568525076 CEST	54966	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.568546057 CEST	443	54966	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.569951057 CEST	54966	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.569957018 CEST	443	54966	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.576901913 CEST	54965	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.576929092 CEST	443	54965	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.576942921 CEST	54965	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.576951027 CEST	443	54965	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.578542948 CEST	54969	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.578576088 CEST	443	54969	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.583352089 CEST	443	54967	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.584017992 CEST	54967	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.584031105 CEST	443	54967	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.584898949 CEST	54967	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.584904909 CEST	443	54967	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.600433111 CEST	54970	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.600450993 CEST	443	54970	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.600516081 CEST	54970	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.601031065 CEST	54970	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.601044893 CEST	443	54970	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.638269901 CEST	443	54968	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.642755985 CEST	54968	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.642777920 CEST	443	54968	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.643347025 CEST	54968	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.643352985 CEST	443	54968	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.695713997 CEST	443	54966	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.695744991 CEST	443	54966	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.695804119 CEST	54966	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.695811987 CEST	443	54966	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.695900917 CEST	54966	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.696355104 CEST	54966	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.696362972 CEST	443	54966	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.696392059 CEST	54966	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.696398020 CEST	443	54966	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.701109886 CEST	54971	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.701142073 CEST	443	54971	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.701297998 CEST	54971	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.701955080 CEST	54971	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.701972961 CEST	443	54971	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.716583014 CEST	443	54967	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.716665983 CEST	443	54967	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.716711044 CEST	54967	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.717041016 CEST	54967	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.717056990 CEST	443	54967	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.721404076 CEST	54972	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.721434116 CEST	443	54972	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.721527100 CEST	54972	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.721673012 CEST	54972	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.721688986 CEST	443	54972	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.774167061 CEST	443	54968	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.774243116 CEST	443	54968	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.774317026 CEST	54968	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.774660110 CEST	54968	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.774677992 CEST	443	54968	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.777829885 CEST	54973	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.777867079 CEST	443	54973	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:28.778199911 CEST	54973	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.778388023 CEST	54973	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:28.778403044 CEST	443	54973	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.339581966 CEST	443	54969	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.340310097 CEST	54969	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.340325117 CEST	443	54969	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.342751980 CEST	443	54970	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.364756107 CEST	54969	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.364767075 CEST	443	54969	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.385322094 CEST	54970	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.388286114 CEST	54970	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.388309956 CEST	443	54970	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.398933887 CEST	54970	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.398952007 CEST	443	54970	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.469561100 CEST	443	54972	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.470508099 CEST	54972	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.470526934 CEST	443	54972	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.471230984 CEST	54972	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.471239090 CEST	443	54972	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.477236986 CEST	443	54971	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.477977037 CEST	54971	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.477997065 CEST	443	54971	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.478511095 CEST	54971	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.478516102 CEST	443	54971	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.517047882 CEST	443	54973	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.517582893 CEST	54973	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.517595053 CEST	443	54973	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.518210888 CEST	54973	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.518215895 CEST	443	54973	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.526297092 CEST	443	54970	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.526319027 CEST	443	54970	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.526370049 CEST	443	54970	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.526388884 CEST	54970	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.526459932 CEST	54970	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.526721954 CEST	54970	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.526770115 CEST	443	54970	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.526803017 CEST	54970	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.526819944 CEST	443	54970	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.530137062 CEST	54974	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.530180931 CEST	443	54974	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.530268908 CEST	54974	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.530469894 CEST	54974	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.530487061 CEST	443	54974	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.555016041 CEST	443	54969	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.555092096 CEST	443	54969	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.555330038 CEST	54969	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.555354118 CEST	54969	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.555370092 CEST	443	54969	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.555382013 CEST	54969	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.555391073 CEST	443	54969	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.558587074 CEST	54975	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.558619976 CEST	443	54975	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.558701038 CEST	54975	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.558926105 CEST	54975	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.558938980 CEST	443	54975	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.600377083 CEST	443	54972	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.600987911 CEST	443	54972	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.601049900 CEST	443	54972	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.601070881 CEST	54972	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.601129055 CEST	54972	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.601172924 CEST	54972	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.601172924 CEST	54972	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.601191998 CEST	443	54972	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.601200104 CEST	443	54972	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.604757071 CEST	54976	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.604793072 CEST	443	54976	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.604876041 CEST	54976	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.605029106 CEST	54976	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.605041027 CEST	443	54976	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.608978033 CEST	443	54971	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.609044075 CEST	443	54971	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.609214067 CEST	54971	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.609255075 CEST	54971	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.609255075 CEST	54971	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.609270096 CEST	443	54971	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.609273911 CEST	443	54971	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.611766100 CEST	54977	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.611788988 CEST	443	54977	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.611999989 CEST	54977	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.612082005 CEST	54977	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.612097025 CEST	443	54977	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.647756100 CEST	443	54973	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.647916079 CEST	443	54973	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.648104906 CEST	54973	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.648185968 CEST	54973	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.648197889 CEST	443	54973	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.648220062 CEST	54973	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.648227930 CEST	443	54973	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.651992083 CEST	54978	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.652018070 CEST	443	54978	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:29.652110100 CEST	54978	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.653178930 CEST	54978	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:29.653196096 CEST	443	54978	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.278615952 CEST	443	54975	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.278920889 CEST	443	54974	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.279253960 CEST	54975	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.279273033 CEST	443	54975	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.279459000 CEST	54974	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.279476881 CEST	443	54974	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.279881954 CEST	54975	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.279890060 CEST	443	54975	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.280021906 CEST	54974	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.280031919 CEST	443	54974	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.340257883 CEST	443	54976	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.340933084 CEST	54976	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.340948105 CEST	443	54976	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.341423988 CEST	54976	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.341428995 CEST	443	54976	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.351840019 CEST	443	54977	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.352664948 CEST	54977	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.352696896 CEST	443	54977	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.353492975 CEST	54977	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.353498936 CEST	443	54977	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.374571085 CEST	443	54978	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.375191927 CEST	54978	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.375201941 CEST	443	54978	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.375824928 CEST	54978	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.375830889 CEST	443	54978	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.408158064 CEST	443	54975	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.408246994 CEST	443	54975	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.408591032 CEST	54975	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.408591032 CEST	54975	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.408591032 CEST	54975	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.412183046 CEST	54979	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.412226915 CEST	443	54979	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.412358999 CEST	54979	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.412467957 CEST	54979	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.412482977 CEST	443	54979	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.414766073 CEST	443	54974	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.414788961 CEST	443	54974	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.414849997 CEST	443	54974	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.415152073 CEST	54974	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.415153027 CEST	54974	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.416824102 CEST	54974	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.416834116 CEST	443	54974	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.420500040 CEST	54980	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.420533895 CEST	443	54980	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.420730114 CEST	54980	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.420809031 CEST	54980	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.420820951 CEST	443	54980	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.474714994 CEST	443	54976	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.474745035 CEST	443	54976	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.474797010 CEST	443	54976	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.474898100 CEST	54976	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.474898100 CEST	54976	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.475306988 CEST	54976	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.475327015 CEST	443	54976	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.478477955 CEST	54981	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.478548050 CEST	443	54981	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.478629112 CEST	54981	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.479285002 CEST	54981	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.479306936 CEST	443	54981	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.484169960 CEST	443	54977	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.484258890 CEST	443	54977	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.484579086 CEST	54977	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.484761953 CEST	54977	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.484761953 CEST	54977	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.484786034 CEST	443	54977	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.484796047 CEST	443	54977	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.487942934 CEST	54982	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.487979889 CEST	443	54982	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.488059998 CEST	54982	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.488596916 CEST	54982	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.488622904 CEST	443	54982	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.503464937 CEST	443	54978	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.503597021 CEST	443	54978	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.503643990 CEST	443	54978	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.503644943 CEST	54978	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.503724098 CEST	54978	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.503935099 CEST	54978	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.503935099 CEST	54978	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.503947973 CEST	443	54978	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.503962040 CEST	443	54978	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.507666111 CEST	54983	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.507698059 CEST	443	54983	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.507797956 CEST	54983	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.507986069 CEST	54983	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.508002043 CEST	443	54983	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:30.711798906 CEST	54975	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:30.711821079 CEST	443	54975	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.161048889 CEST	443	54979	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.161775112 CEST	54979	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.161797047 CEST	443	54979	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.162384987 CEST	54979	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.162390947 CEST	443	54979	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.163547993 CEST	443	54980	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.163938046 CEST	54980	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.163949013 CEST	443	54980	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.164447069 CEST	54980	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.164453030 CEST	443	54980	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.230232000 CEST	443	54982	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.230849981 CEST	54982	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.230864048 CEST	443	54982	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.231288910 CEST	54982	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.231295109 CEST	443	54982	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.241072893 CEST	443	54981	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.242249966 CEST	54981	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.242283106 CEST	443	54981	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.242785931 CEST	54981	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.242794991 CEST	443	54981	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.248358011 CEST	443	54983	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.248725891 CEST	54983	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.248753071 CEST	443	54983	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.249201059 CEST	54983	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.249211073 CEST	443	54983	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.295253038 CEST	443	54979	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.295366049 CEST	443	54979	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.295537949 CEST	54979	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.295975924 CEST	54979	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.295994997 CEST	443	54979	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.296015978 CEST	54979	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.296021938 CEST	443	54979	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.305113077 CEST	54984	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.305160046 CEST	443	54984	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.305253983 CEST	54984	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.305493116 CEST	54984	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.305505037 CEST	443	54984	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.339612961 CEST	443	54980	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.340006113 CEST	443	54980	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.340068102 CEST	54980	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.340400934 CEST	54980	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.340410948 CEST	443	54980	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.340538025 CEST	54980	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.340545893 CEST	443	54980	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.343981981 CEST	54985	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.343996048 CEST	443	54985	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.344062090 CEST	54985	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.344218969 CEST	54985	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.344233036 CEST	443	54985	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.364363909 CEST	443	54982	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.364595890 CEST	443	54982	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.364641905 CEST	443	54982	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.364644051 CEST	54982	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.364706039 CEST	54982	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.364866018 CEST	54982	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.364866018 CEST	54982	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.364880085 CEST	443	54982	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.364887953 CEST	443	54982	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.369421005 CEST	54986	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.369458914 CEST	443	54986	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.369549036 CEST	54986	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.370119095 CEST	54986	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.370131969 CEST	443	54986	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.376528978 CEST	443	54981	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.376848936 CEST	443	54981	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.376916885 CEST	54981	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.376981020 CEST	54981	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.376981020 CEST	54981	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.377002954 CEST	443	54981	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.377015114 CEST	443	54981	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.379719973 CEST	54987	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.379736900 CEST	443	54987	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.379806995 CEST	54987	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.379947901 CEST	54987	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.379961967 CEST	443	54987	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.380213022 CEST	443	54983	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.380279064 CEST	443	54983	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.380424976 CEST	54983	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.380467892 CEST	54983	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.380467892 CEST	54983	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.380486965 CEST	443	54983	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.380501032 CEST	443	54983	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.382659912 CEST	54988	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.382693052 CEST	443	54988	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:31.382841110 CEST	54988	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.382961988 CEST	54988	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:31.382978916 CEST	443	54988	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.071568012 CEST	443	54984	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.072184086 CEST	54984	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.072200060 CEST	443	54984	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.072715998 CEST	54984	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.072721004 CEST	443	54984	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.083571911 CEST	443	54985	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.083980083 CEST	54985	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.084006071 CEST	443	54985	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.084413052 CEST	54985	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.084419966 CEST	443	54985	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.134702921 CEST	443	54986	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.135360003 CEST	54986	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.135373116 CEST	443	54986	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.135708094 CEST	443	54987	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.135940075 CEST	54986	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.135947943 CEST	443	54986	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.136055946 CEST	54987	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.136075974 CEST	443	54987	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.136418104 CEST	54987	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.136423111 CEST	443	54987	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.142141104 CEST	443	54988	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.142518997 CEST	54988	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.142537117 CEST	443	54988	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.142946959 CEST	54988	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.142952919 CEST	443	54988	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.267748117 CEST	443	54984	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.267771959 CEST	443	54984	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.267812967 CEST	443	54984	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.267832994 CEST	54984	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.267877102 CEST	54984	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.268110991 CEST	443	54985	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.268176079 CEST	443	54985	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.268178940 CEST	54984	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.268193960 CEST	443	54984	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.268245935 CEST	54985	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.268479109 CEST	54985	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.268498898 CEST	443	54985	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.268515110 CEST	54985	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.268521070 CEST	443	54985	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.271745920 CEST	54989	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.271752119 CEST	54990	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.271775007 CEST	443	54990	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.271779060 CEST	443	54989	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.271863937 CEST	54990	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.272032976 CEST	54989	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.272032976 CEST	54989	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.272037029 CEST	54990	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.272049904 CEST	443	54990	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.272067070 CEST	443	54989	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.288425922 CEST	443	54987	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.288779020 CEST	443	54987	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.288834095 CEST	54987	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.288862944 CEST	54987	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.288876057 CEST	443	54987	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.288888931 CEST	54987	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.288894892 CEST	443	54987	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.291748047 CEST	54991	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.291781902 CEST	443	54991	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.291887045 CEST	54991	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.292048931 CEST	54991	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.292068005 CEST	443	54991	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.295687914 CEST	443	54986	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.295883894 CEST	443	54986	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.296137094 CEST	54986	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.296210051 CEST	54986	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.296220064 CEST	443	54986	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.296227932 CEST	54986	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.296236992 CEST	443	54986	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.298841000 CEST	54992	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.298871040 CEST	443	54992	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.298943043 CEST	54992	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.299113989 CEST	54992	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.299129009 CEST	443	54992	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.331041098 CEST	443	54988	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.331064939 CEST	443	54988	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.331115961 CEST	443	54988	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.331149101 CEST	54988	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.331204891 CEST	54988	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.331772089 CEST	54988	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.331779003 CEST	443	54988	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.331829071 CEST	54988	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.331834078 CEST	443	54988	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.335304976 CEST	54993	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.335347891 CEST	443	54993	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:32.335444927 CEST	54993	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.335611105 CEST	54993	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:32.335623980 CEST	443	54993	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.013911963 CEST	443	54989	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.019992113 CEST	54989	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.020011902 CEST	443	54989	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.021349907 CEST	54989	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.021382093 CEST	443	54989	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.048166990 CEST	443	54991	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.048748970 CEST	54991	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.048773050 CEST	443	54991	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.049748898 CEST	54991	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.049757004 CEST	443	54991	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.053762913 CEST	443	54990	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.054186106 CEST	54990	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.054197073 CEST	443	54990	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.054764986 CEST	54990	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.054770947 CEST	443	54990	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.067703009 CEST	443	54993	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.068139076 CEST	54993	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.068150997 CEST	443	54993	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.068975925 CEST	54993	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.068980932 CEST	443	54993	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.094922066 CEST	443	54992	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.095482111 CEST	54992	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.095491886 CEST	443	54992	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.096230984 CEST	54992	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.096235991 CEST	443	54992	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.153172016 CEST	443	54989	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.153203964 CEST	443	54989	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.153247118 CEST	443	54989	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.153275013 CEST	54989	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.153383970 CEST	54989	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.154052973 CEST	54989	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.154052973 CEST	54989	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.154072046 CEST	443	54989	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.154083014 CEST	443	54989	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.158694029 CEST	54994	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.158726931 CEST	443	54994	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.158814907 CEST	54994	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.159106016 CEST	54994	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.159121037 CEST	443	54994	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.198880911 CEST	443	54993	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.198942900 CEST	443	54993	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.199038982 CEST	54993	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.199374914 CEST	54993	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.199388981 CEST	443	54993	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.203684092 CEST	54995	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.203707933 CEST	443	54995	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.203885078 CEST	54995	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.204407930 CEST	54995	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.204418898 CEST	443	54995	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.206252098 CEST	443	54990	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.206383944 CEST	443	54990	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.206432104 CEST	54990	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.206859112 CEST	54990	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.206876040 CEST	443	54990	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.206882000 CEST	54990	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.206887960 CEST	443	54990	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.211750031 CEST	54996	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.211806059 CEST	443	54996	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.211890936 CEST	54996	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.212604046 CEST	54996	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.212627888 CEST	443	54996	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.222038984 CEST	443	54991	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.222138882 CEST	443	54991	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.222268105 CEST	54991	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.222352028 CEST	54991	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.222383976 CEST	443	54991	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.222392082 CEST	54991	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.222398996 CEST	443	54991	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.226047993 CEST	54997	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.226087093 CEST	443	54997	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.226336002 CEST	54997	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.226526022 CEST	54997	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.226543903 CEST	443	54997	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.232779980 CEST	443	54992	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.235160112 CEST	443	54992	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.235249043 CEST	54992	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.235358000 CEST	54992	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.235373020 CEST	443	54992	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.235385895 CEST	54992	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.235390902 CEST	443	54992	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.239722967 CEST	54998	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.239759922 CEST	443	54998	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.239875078 CEST	54998	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.240056992 CEST	54998	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.240070105 CEST	443	54998	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.893790007 CEST	443	54994	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.894443035 CEST	54994	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.894470930 CEST	443	54994	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.894979000 CEST	54994	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.894984961 CEST	443	54994	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.951589108 CEST	443	54995	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.952210903 CEST	54995	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.952227116 CEST	443	54995	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.952970982 CEST	54995	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.952975988 CEST	443	54995	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.957710028 CEST	443	54996	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.958121061 CEST	54996	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.958141088 CEST	443	54996	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.958784103 CEST	54996	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.958791018 CEST	443	54996	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.985419035 CEST	443	54997	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.985987902 CEST	54997	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.986007929 CEST	443	54997	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:33.986797094 CEST	54997	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:33.986803055 CEST	443	54997	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.011477947 CEST	443	54998	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.014149904 CEST	54998	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.014163017 CEST	443	54998	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.015362024 CEST	54998	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.015368938 CEST	443	54998	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.027457952 CEST	443	54994	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.028019905 CEST	443	54994	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.028270960 CEST	54994	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.052505970 CEST	54994	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.052531958 CEST	443	54994	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.052545071 CEST	54994	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.052552938 CEST	443	54994	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.058744907 CEST	54999	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.058794022 CEST	443	54999	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.058957100 CEST	54999	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.059396029 CEST	54999	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.059412956 CEST	443	54999	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.083515882 CEST	443	54995	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.083585024 CEST	443	54995	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.083771944 CEST	54995	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.084232092 CEST	54995	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.084253073 CEST	443	54995	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.084261894 CEST	54995	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.084268093 CEST	443	54995	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.089405060 CEST	55000	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.089426994 CEST	443	55000	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.089534044 CEST	55000	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.089833021 CEST	55000	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.089847088 CEST	443	55000	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.090842009 CEST	443	54996	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.091109991 CEST	443	54996	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.091180086 CEST	54996	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.091291904 CEST	54996	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.091304064 CEST	443	54996	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.096151114 CEST	55001	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.096175909 CEST	443	55001	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.096338987 CEST	55001	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.096563101 CEST	55001	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.096573114 CEST	443	55001	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.120239019 CEST	443	54997	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.120320082 CEST	443	54997	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.120379925 CEST	54997	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.120518923 CEST	54997	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.120538950 CEST	443	54997	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.120552063 CEST	54997	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.120560884 CEST	443	54997	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.125397921 CEST	55002	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.125418901 CEST	443	55002	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.125523090 CEST	55002	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.125725031 CEST	55002	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.125741005 CEST	443	55002	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.149797916 CEST	443	54998	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.149831057 CEST	443	54998	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.149899006 CEST	54998	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.149910927 CEST	443	54998	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.149941921 CEST	443	54998	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.150013924 CEST	54998	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.150439024 CEST	54998	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.150455952 CEST	443	54998	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.150492907 CEST	54998	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.150502920 CEST	443	54998	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.157738924 CEST	55003	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.157764912 CEST	443	55003	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.157871008 CEST	55003	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.158061028 CEST	55003	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.158077002 CEST	443	55003	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.837400913 CEST	443	55000	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.838521957 CEST	55000	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.838538885 CEST	443	55000	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.838624954 CEST	443	55001	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.839695930 CEST	55000	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.839700937 CEST	443	55000	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.840303898 CEST	55001	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.840317011 CEST	443	55001	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.840748072 CEST	55001	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.840751886 CEST	443	55001	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.848572016 CEST	443	55002	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.849415064 CEST	55002	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.849426031 CEST	443	55002	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.850146055 CEST	55002	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.850152969 CEST	443	55002	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.894956112 CEST	443	55003	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.896245003 CEST	55003	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.896255970 CEST	443	55003	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.897049904 CEST	55003	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.897063017 CEST	443	55003	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.969028950 CEST	443	55000	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.969158888 CEST	443	55000	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.969228029 CEST	55000	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.969974041 CEST	55000	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.969994068 CEST	443	55000	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.970979929 CEST	443	55001	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.971065044 CEST	443	55001	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.971154928 CEST	55001	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.973309040 CEST	55001	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.973324060 CEST	443	55001	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.973395109 CEST	55001	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.973401070 CEST	443	55001	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.979916096 CEST	443	55002	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.979934931 CEST	443	55002	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.979993105 CEST	55002	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.980000973 CEST	443	55002	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.980051994 CEST	443	55002	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.980109930 CEST	55002	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.980820894 CEST	55002	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.980820894 CEST	55002	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.980832100 CEST	443	55002	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.980839968 CEST	443	55002	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.985729933 CEST	55004	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.985780954 CEST	443	55004	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.986021996 CEST	55004	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.987510920 CEST	55004	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.987528086 CEST	443	55004	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.989445925 CEST	55005	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.989483118 CEST	443	55005	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.989732027 CEST	55005	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.991096020 CEST	55005	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.991118908 CEST	443	55005	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.991136074 CEST	55006	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.991148949 CEST	443	55006	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:34.991228104 CEST	55006	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.991642952 CEST	55006	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:34.991657019 CEST	443	55006	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.189722061 CEST	443	55003	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.189745903 CEST	443	55003	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.189800024 CEST	443	55003	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.189814091 CEST	55003	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.189893007 CEST	55003	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.190223932 CEST	55003	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.190239906 CEST	443	55003	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.190251112 CEST	55003	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.190257072 CEST	443	55003	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.193886042 CEST	55007	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.193918943 CEST	443	55007	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.194155931 CEST	55007	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.194828033 CEST	55007	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.194848061 CEST	443	55007	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.720276117 CEST	443	55004	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.721191883 CEST	55004	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.721213102 CEST	443	55004	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.722239017 CEST	55004	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.722244978 CEST	443	55004	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.729415894 CEST	443	55005	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.731995106 CEST	55005	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.732007980 CEST	443	55005	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.733107090 CEST	55005	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.733114958 CEST	443	55005	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.759428024 CEST	443	55006	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.786341906 CEST	55006	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.786369085 CEST	443	55006	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.787427902 CEST	55006	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.787434101 CEST	443	55006	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.819787025 CEST	443	54999	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.820589066 CEST	54999	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.820600033 CEST	443	54999	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.821784973 CEST	54999	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.821790934 CEST	443	54999	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.855036974 CEST	443	55004	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.855096102 CEST	443	55004	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.855217934 CEST	443	55004	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.855290890 CEST	55004	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.855762005 CEST	55004	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.855787039 CEST	443	55004	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.855798006 CEST	55004	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.855804920 CEST	443	55004	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.862023115 CEST	55008	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.862132072 CEST	443	55008	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.862277985 CEST	55008	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.862605095 CEST	55008	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.862662077 CEST	443	55008	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.864833117 CEST	443	55005	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.865377903 CEST	443	55005	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.865492105 CEST	55005	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.865678072 CEST	55005	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.865708113 CEST	443	55005	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.870471001 CEST	55009	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.870511055 CEST	443	55009	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.870599031 CEST	55009	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.870999098 CEST	55009	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.871011972 CEST	443	55009	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.922297001 CEST	443	55006	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.922648907 CEST	443	55006	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.922697067 CEST	55006	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.922717094 CEST	443	55006	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.922765970 CEST	443	55006	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.922818899 CEST	55006	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.923082113 CEST	55006	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.923094988 CEST	443	55006	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.929020882 CEST	55010	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.929074049 CEST	443	55010	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.929346085 CEST	55010	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.929631948 CEST	55010	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.929649115 CEST	443	55010	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.936244011 CEST	443	55007	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.936947107 CEST	55007	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.936960936 CEST	443	55007	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.937710047 CEST	55007	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.937716961 CEST	443	55007	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.950705051 CEST	443	54999	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.950778961 CEST	443	54999	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.950864077 CEST	54999	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.950983047 CEST	54999	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.950999022 CEST	443	54999	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.951011896 CEST	54999	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.951018095 CEST	443	54999	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.957091093 CEST	55011	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.957125902 CEST	443	55011	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:35.957282066 CEST	55011	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.957550049 CEST	55011	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:35.957562923 CEST	443	55011	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.067620993 CEST	443	55007	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.067692041 CEST	443	55007	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.067780972 CEST	55007	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.068290949 CEST	55007	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.068290949 CEST	55007	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.068312883 CEST	443	55007	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.068331957 CEST	443	55007	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.076415062 CEST	55012	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.076450109 CEST	443	55012	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.076616049 CEST	55012	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.077265024 CEST	55012	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.077295065 CEST	443	55012	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.597168922 CEST	443	55008	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.598114967 CEST	55008	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.598149061 CEST	443	55008	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.599011898 CEST	55008	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.599021912 CEST	443	55008	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.605560064 CEST	443	55009	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.606446981 CEST	55009	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.606472015 CEST	443	55009	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.607125998 CEST	55009	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.607139111 CEST	443	55009	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.664211035 CEST	443	55010	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.664824009 CEST	55010	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.664855957 CEST	443	55010	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.665771961 CEST	55010	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.665781021 CEST	443	55010	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.711391926 CEST	443	55011	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.712872982 CEST	55011	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.712897062 CEST	443	55011	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.713726044 CEST	55011	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.713743925 CEST	443	55011	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.729613066 CEST	443	55008	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.729629993 CEST	443	55008	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.729691029 CEST	443	55008	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.729687929 CEST	55008	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.729854107 CEST	55008	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.729926109 CEST	55008	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.729947090 CEST	443	55008	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.729957104 CEST	55008	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.729963064 CEST	443	55008	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.732722998 CEST	55013	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.732764959 CEST	443	55013	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.732839108 CEST	55013	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.732985020 CEST	55013	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.732996941 CEST	443	55013	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.738277912 CEST	443	55009	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.739089012 CEST	443	55009	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.739136934 CEST	443	55009	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.739161015 CEST	55009	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.739192963 CEST	55009	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.739238977 CEST	55009	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.739257097 CEST	443	55009	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.739268064 CEST	55009	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.739274025 CEST	443	55009	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.741700888 CEST	55014	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.741738081 CEST	443	55014	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.741811991 CEST	55014	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.741952896 CEST	55014	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.741971970 CEST	443	55014	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.798082113 CEST	443	55010	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.798115969 CEST	443	55010	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.798173904 CEST	443	55010	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.798213005 CEST	55010	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.798239946 CEST	55010	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.799571991 CEST	55010	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.799607992 CEST	443	55010	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.799629927 CEST	55010	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.799635887 CEST	443	55010	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.802994013 CEST	55015	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.803040981 CEST	443	55015	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.803133965 CEST	55015	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.803275108 CEST	55015	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.803292036 CEST	443	55015	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.815596104 CEST	443	55012	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.816150904 CEST	55012	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.816164970 CEST	443	55012	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.816564083 CEST	55012	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.816571951 CEST	443	55012	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.846510887 CEST	443	55011	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.847090006 CEST	443	55011	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.847155094 CEST	55011	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.847193003 CEST	55011	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.847213030 CEST	443	55011	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.847224951 CEST	55011	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.847230911 CEST	443	55011	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.850351095 CEST	55016	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.850395918 CEST	443	55016	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.850512981 CEST	55016	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.850650072 CEST	55016	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.850665092 CEST	443	55016	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.944535971 CEST	443	55012	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.944637060 CEST	443	55012	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.944746017 CEST	55012	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.944919109 CEST	55012	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.944941998 CEST	443	55012	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.944983006 CEST	55012	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.944989920 CEST	443	55012	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.949192047 CEST	55017	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.949246883 CEST	443	55017	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:36.949472904 CEST	55017	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.949657917 CEST	55017	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:36.949681044 CEST	443	55017	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.477924109 CEST	443	55013	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.479346037 CEST	55013	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.479372978 CEST	443	55013	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.479964972 CEST	55013	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.479971886 CEST	443	55013	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.513350010 CEST	443	55014	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.514077902 CEST	55014	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.514100075 CEST	443	55014	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.514574051 CEST	55014	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.514585018 CEST	443	55014	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.542426109 CEST	443	55015	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.543015003 CEST	55015	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.543040037 CEST	443	55015	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.543745041 CEST	55015	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.543751955 CEST	443	55015	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.589426041 CEST	443	55016	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.590120077 CEST	55016	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.590135098 CEST	443	55016	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.590894938 CEST	55016	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.590908051 CEST	443	55016	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.614003897 CEST	443	55013	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.614240885 CEST	443	55013	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.614381075 CEST	55013	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.614444017 CEST	55013	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.614464998 CEST	443	55013	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.614475965 CEST	55013	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.614481926 CEST	443	55013	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.619199991 CEST	55018	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.619240046 CEST	443	55018	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.619332075 CEST	55018	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.619579077 CEST	55018	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.619587898 CEST	443	55018	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.650444984 CEST	443	55014	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.650605917 CEST	443	55014	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.650661945 CEST	443	55014	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.650753021 CEST	55014	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.650782108 CEST	55014	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.650840998 CEST	55014	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.650870085 CEST	443	55014	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.650887012 CEST	55014	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.650923014 CEST	443	55014	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.653645992 CEST	55019	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.653681040 CEST	443	55019	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.653831005 CEST	55019	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.654068947 CEST	55019	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.654082060 CEST	443	55019	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.675347090 CEST	443	55015	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.675414085 CEST	443	55015	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.675559044 CEST	55015	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.675609112 CEST	55015	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.675632954 CEST	443	55015	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.675643921 CEST	55015	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.675649881 CEST	443	55015	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.678179026 CEST	55020	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.678212881 CEST	443	55020	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.678301096 CEST	55020	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.678487062 CEST	55020	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.678503036 CEST	443	55020	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.710483074 CEST	443	55017	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.711112022 CEST	55017	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.711122990 CEST	443	55017	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.711632967 CEST	55017	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.711638927 CEST	443	55017	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.722163916 CEST	443	55016	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.722206116 CEST	443	55016	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.722274065 CEST	443	55016	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.722368956 CEST	55016	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.722477913 CEST	55016	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.722479105 CEST	55016	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.722497940 CEST	443	55016	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.722508907 CEST	443	55016	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.726289034 CEST	55021	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.726325035 CEST	443	55021	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.726394892 CEST	55021	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.726644993 CEST	55021	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.726658106 CEST	443	55021	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.844032049 CEST	443	55017	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.844433069 CEST	443	55017	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.844583988 CEST	55017	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.847846031 CEST	55017	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.847879887 CEST	443	55017	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.848005056 CEST	55017	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.848012924 CEST	443	55017	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.852014065 CEST	55022	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.852061987 CEST	443	55022	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:37.852147102 CEST	55022	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.852461100 CEST	55022	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:37.852475882 CEST	443	55022	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.350126982 CEST	443	55018	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.350785971 CEST	55018	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.350802898 CEST	443	55018	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.351330042 CEST	55018	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.351334095 CEST	443	55018	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.399996996 CEST	443	55019	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.400670052 CEST	55019	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.400685072 CEST	443	55019	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.401273966 CEST	55019	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.401281118 CEST	443	55019	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.412244081 CEST	443	55020	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.412779093 CEST	55020	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.412822962 CEST	443	55020	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.413263083 CEST	55020	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.413270950 CEST	443	55020	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.484810114 CEST	443	55018	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.484889984 CEST	443	55018	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.485004902 CEST	443	55018	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.485027075 CEST	55018	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.485147953 CEST	55018	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.485280037 CEST	55018	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.485280037 CEST	55018	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.485287905 CEST	443	55018	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.485295057 CEST	443	55018	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.488667965 CEST	55023	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.488704920 CEST	443	55023	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.488912106 CEST	55023	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.489020109 CEST	55023	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.489028931 CEST	443	55023	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.497504950 CEST	443	55021	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.497941971 CEST	55021	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.497952938 CEST	443	55021	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.498653889 CEST	55021	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.498658895 CEST	443	55021	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.533795118 CEST	443	55019	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.533863068 CEST	443	55019	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.533947945 CEST	55019	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.534321070 CEST	55019	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.534321070 CEST	55019	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.534338951 CEST	443	55019	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.534349918 CEST	443	55019	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.538078070 CEST	55024	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.538101912 CEST	443	55024	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.538197041 CEST	55024	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.538371086 CEST	55024	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.538382053 CEST	443	55024	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.542043924 CEST	443	55020	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.542124033 CEST	443	55020	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.542203903 CEST	55020	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.542272091 CEST	55020	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.542289019 CEST	443	55020	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.542299986 CEST	55020	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.542305946 CEST	443	55020	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.544652939 CEST	55025	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.544694901 CEST	443	55025	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.544795990 CEST	55025	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.544938087 CEST	55025	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.544953108 CEST	443	55025	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.619198084 CEST	443	55022	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.619786024 CEST	55022	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.619796991 CEST	443	55022	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.620301962 CEST	55022	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.620306969 CEST	443	55022	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.633771896 CEST	443	55021	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.633846045 CEST	443	55021	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.634135008 CEST	55021	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.634222031 CEST	55021	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.634222031 CEST	55021	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.634241104 CEST	443	55021	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.634253979 CEST	443	55021	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.637423038 CEST	55026	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.637459040 CEST	443	55026	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.637687922 CEST	55026	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.637687922 CEST	55026	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.637718916 CEST	443	55026	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.756372929 CEST	443	55022	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.756608009 CEST	443	55022	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.756700039 CEST	55022	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.756875038 CEST	55022	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.756890059 CEST	443	55022	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.756926060 CEST	55022	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.756932974 CEST	443	55022	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.760215044 CEST	55027	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.760262012 CEST	443	55027	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:38.760452986 CEST	55027	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.760787010 CEST	55027	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:38.760807991 CEST	443	55027	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.241194963 CEST	443	55023	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.241833925 CEST	55023	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.241871119 CEST	443	55023	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.242654085 CEST	55023	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.242681026 CEST	443	55023	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.264774084 CEST	443	55024	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.265903950 CEST	55024	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.265903950 CEST	55024	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.265923023 CEST	443	55024	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.265938997 CEST	443	55024	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.295008898 CEST	443	55025	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.295609951 CEST	55025	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.295629025 CEST	443	55025	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.296143055 CEST	55025	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.296149015 CEST	443	55025	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.359519005 CEST	443	55026	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.360224962 CEST	55026	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.360258102 CEST	443	55026	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.360902071 CEST	55026	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.360915899 CEST	443	55026	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.374686956 CEST	443	55023	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.374757051 CEST	443	55023	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.374869108 CEST	55023	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.375237942 CEST	55023	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.375237942 CEST	55023	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.375267029 CEST	443	55023	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.375278950 CEST	443	55023	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.378581047 CEST	55028	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.378632069 CEST	443	55028	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.378793001 CEST	55028	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.379333019 CEST	55028	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.379352093 CEST	443	55028	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.393934965 CEST	443	55024	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.393965006 CEST	443	55024	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.394011021 CEST	443	55024	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.394058943 CEST	55024	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.394058943 CEST	55024	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.394373894 CEST	55024	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.394373894 CEST	55024	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.394392967 CEST	443	55024	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.394402981 CEST	443	55024	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.397490025 CEST	55029	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.397530079 CEST	443	55029	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.397876978 CEST	55029	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.398029089 CEST	55029	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.398046970 CEST	443	55029	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.446163893 CEST	443	55025	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.446233034 CEST	443	55025	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.446407080 CEST	55025	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.446810961 CEST	55025	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.446829081 CEST	443	55025	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.446945906 CEST	55025	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.446953058 CEST	443	55025	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.450767994 CEST	55030	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.450818062 CEST	443	55030	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.450933933 CEST	55030	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.451316118 CEST	55030	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.451327085 CEST	443	55030	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.489696026 CEST	443	55026	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.489818096 CEST	443	55026	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.489936113 CEST	55026	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.489938021 CEST	443	55026	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.489996910 CEST	55026	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.490191936 CEST	55026	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.490191936 CEST	55026	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.490209103 CEST	443	55026	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.490216970 CEST	443	55026	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.493743896 CEST	55031	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.493789911 CEST	443	55031	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.493875980 CEST	55031	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.494018078 CEST	55031	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.494033098 CEST	443	55031	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.500617027 CEST	443	55027	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.501096010 CEST	55027	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.501111031 CEST	443	55027	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.501558065 CEST	55027	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.501563072 CEST	443	55027	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.633322954 CEST	443	55027	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.633759975 CEST	443	55027	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.633899927 CEST	55027	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.634020090 CEST	55027	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.634057999 CEST	443	55027	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.634083033 CEST	55027	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.634092093 CEST	443	55027	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.637362003 CEST	55032	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.637403011 CEST	443	55032	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:39.637464046 CEST	55032	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.637638092 CEST	55032	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:39.637649059 CEST	443	55032	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.114797115 CEST	443	55028	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.115472078 CEST	55028	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.115487099 CEST	443	55028	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.116091967 CEST	55028	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.116099119 CEST	443	55028	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.153748035 CEST	443	55029	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.154328108 CEST	55029	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.154356956 CEST	443	55029	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.154896975 CEST	55029	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.154907942 CEST	443	55029	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.195780039 CEST	443	55030	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.196589947 CEST	55030	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.196603060 CEST	443	55030	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.197282076 CEST	55030	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.197288036 CEST	443	55030	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.227729082 CEST	443	55031	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.228472948 CEST	55031	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.228509903 CEST	443	55031	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.229231119 CEST	55031	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.229239941 CEST	443	55031	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.247126102 CEST	443	55028	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.247159958 CEST	443	55028	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.247206926 CEST	443	55028	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.247220039 CEST	55028	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.247284889 CEST	55028	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.247797012 CEST	55028	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.247817039 CEST	443	55028	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.247828007 CEST	55028	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.247833967 CEST	443	55028	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.255620956 CEST	55033	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.255654097 CEST	443	55033	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.255713940 CEST	55033	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.255898952 CEST	55033	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.255913973 CEST	443	55033	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.284797907 CEST	443	55029	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.284871101 CEST	443	55029	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.284955025 CEST	55029	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.285329103 CEST	55029	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.285356998 CEST	443	55029	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.285371065 CEST	55029	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.285377026 CEST	443	55029	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.289072037 CEST	55034	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.289118052 CEST	443	55034	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.289176941 CEST	55034	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.289467096 CEST	55034	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.289480925 CEST	443	55034	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.329341888 CEST	443	55030	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.329365015 CEST	443	55030	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.329407930 CEST	443	55030	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.329493999 CEST	55030	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.329811096 CEST	55030	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.329828978 CEST	443	55030	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.329847097 CEST	55030	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.329865932 CEST	443	55030	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.334326029 CEST	55035	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.334362030 CEST	443	55035	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.334434032 CEST	55035	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.334677935 CEST	55035	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.334695101 CEST	443	55035	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.359498978 CEST	443	55031	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.359627008 CEST	443	55031	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.359901905 CEST	55031	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.360044003 CEST	55031	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.360055923 CEST	443	55031	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.365988016 CEST	55036	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.366024971 CEST	443	55036	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.366094112 CEST	55036	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.366323948 CEST	55036	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.366341114 CEST	443	55036	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.379107952 CEST	443	55032	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.380233049 CEST	55032	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.380264997 CEST	443	55032	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.381450891 CEST	55032	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.381457090 CEST	443	55032	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.511919975 CEST	443	55032	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.511953115 CEST	443	55032	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.512027025 CEST	443	55032	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.512031078 CEST	55032	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.512070894 CEST	55032	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.512721062 CEST	55032	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.512741089 CEST	443	55032	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.519458055 CEST	55037	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.519494057 CEST	443	55037	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:40.519716024 CEST	55037	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.520175934 CEST	55037	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:40.520190954 CEST	443	55037	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.032007933 CEST	443	55033	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.032738924 CEST	55033	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.032769918 CEST	443	55033	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.034084082 CEST	55033	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.034097910 CEST	443	55033	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.048125982 CEST	443	55034	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.048644066 CEST	55034	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.048679113 CEST	443	55034	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.049401999 CEST	55034	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.049407959 CEST	443	55034	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.158042908 CEST	443	55036	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.165617943 CEST	443	55033	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.165647984 CEST	443	55033	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.165705919 CEST	55033	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.165724993 CEST	443	55033	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.165780067 CEST	55033	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.169228077 CEST	55036	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.169255972 CEST	443	55036	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.169967890 CEST	55036	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.169972897 CEST	443	55036	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.171006918 CEST	55033	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.171029091 CEST	443	55033	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.179722071 CEST	443	55034	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.179747105 CEST	443	55034	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.179795027 CEST	443	55034	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.179848909 CEST	55034	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.180139065 CEST	55034	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.180156946 CEST	443	55034	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.180164099 CEST	55034	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.180170059 CEST	443	55034	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.189937115 CEST	55038	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.189985991 CEST	443	55038	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.190068960 CEST	55038	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.190746069 CEST	55038	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.190772057 CEST	443	55038	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.193213940 CEST	55039	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.193259001 CEST	443	55039	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.193377018 CEST	55039	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.194067955 CEST	55039	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.194088936 CEST	443	55039	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.285032034 CEST	443	55037	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.287261009 CEST	55037	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.287275076 CEST	443	55037	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.288547039 CEST	55037	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.288553953 CEST	443	55037	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.297650099 CEST	443	55036	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.297686100 CEST	443	55036	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.297758102 CEST	443	55036	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.297822952 CEST	55036	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.297950029 CEST	55036	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.297975063 CEST	443	55036	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.297981977 CEST	55036	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.297986984 CEST	443	55036	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.303878069 CEST	55040	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.303929090 CEST	443	55040	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.304524899 CEST	55040	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.306107044 CEST	55040	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.306122065 CEST	443	55040	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.404488087 CEST	55041	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:41.404539108 CEST	443	55041	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:41.404607058 CEST	55041	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:41.405308962 CEST	55041	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:41.405332088 CEST	443	55041	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:41.409948111 CEST	55042	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:41.409996986 CEST	443	55042	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:41.410070896 CEST	55042	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:41.410729885 CEST	55042	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:41.410748959 CEST	443	55042	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:41.418179035 CEST	443	55037	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.418282986 CEST	443	55037	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.418334007 CEST	55037	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.418649912 CEST	55037	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.418649912 CEST	55037	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.418669939 CEST	443	55037	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.418682098 CEST	443	55037	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.421819925 CEST	55043	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.421865940 CEST	443	55043	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.422005892 CEST	55043	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.422147036 CEST	55043	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.422163010 CEST	443	55043	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.928090096 CEST	443	55038	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.928694963 CEST	55038	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.928721905 CEST	443	55038	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.929228067 CEST	55038	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.929234028 CEST	443	55038	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.943860054 CEST	443	55039	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.944344997 CEST	55039	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.944364071 CEST	443	55039	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:41.944750071 CEST	55039	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:41.944758892 CEST	443	55039	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.058960915 CEST	443	55038	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.058999062 CEST	443	55038	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.059047937 CEST	443	55038	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.059067011 CEST	55038	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.059094906 CEST	55038	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.059463978 CEST	55038	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.059484005 CEST	443	55038	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.067099094 CEST	55044	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.067137957 CEST	443	55044	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.067277908 CEST	55044	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.067640066 CEST	55044	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.067653894 CEST	443	55044	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.077487946 CEST	443	55039	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.077707052 CEST	443	55039	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.077833891 CEST	55039	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.078560114 CEST	55039	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.078591108 CEST	443	55039	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.078633070 CEST	55039	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.078643084 CEST	443	55039	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.084747076 CEST	55045	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.084796906 CEST	443	55045	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.084867954 CEST	55045	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.085076094 CEST	55045	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.085095882 CEST	443	55045	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.087776899 CEST	443	55040	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.088610888 CEST	55040	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.088633060 CEST	443	55040	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.090110064 CEST	55040	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.090116978 CEST	443	55040	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.158874035 CEST	443	55043	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.160311937 CEST	55043	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.160334110 CEST	443	55043	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.161674023 CEST	55043	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.161689043 CEST	443	55043	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.224706888 CEST	443	55040	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.224737883 CEST	443	55040	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.224792957 CEST	443	55040	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.224817991 CEST	55040	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.224870920 CEST	55040	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.229249954 CEST	55040	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.229249954 CEST	55040	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.229269981 CEST	443	55040	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.229279995 CEST	443	55040	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.242439985 CEST	55046	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.242484093 CEST	443	55046	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.242610931 CEST	55046	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.243104935 CEST	55046	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.243134975 CEST	443	55046	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.290891886 CEST	443	55043	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.291002035 CEST	443	55043	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.291064024 CEST	55043	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.318061113 CEST	55043	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.318120003 CEST	443	55043	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.318139076 CEST	55043	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.318147898 CEST	443	55043	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.325433969 CEST	443	55035	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.326910019 CEST	55035	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.326960087 CEST	443	55035	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.327908993 CEST	55035	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.327917099 CEST	443	55035	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.328625917 CEST	55047	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.328685999 CEST	443	55047	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.328747988 CEST	55047	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.329145908 CEST	55047	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.329165936 CEST	443	55047	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.458173990 CEST	443	55035	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.458236933 CEST	443	55035	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.458420038 CEST	55035	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.458914995 CEST	55035	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.458945036 CEST	443	55035	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.458962917 CEST	55035	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.458971977 CEST	443	55035	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.466495037 CEST	55048	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.466530085 CEST	443	55048	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.466856956 CEST	55048	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.467247963 CEST	55048	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.467258930 CEST	443	55048	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.517581940 CEST	443	55042	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:42.517669916 CEST	55042	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:42.519038916 CEST	443	55041	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:42.519104004 CEST	55041	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:42.522725105 CEST	55042	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:42.522758961 CEST	443	55042	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:42.523046970 CEST	443	55042	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:42.525027037 CEST	55041	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:42.525055885 CEST	443	55041	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:42.525341034 CEST	443	55041	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:42.529483080 CEST	55041	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:42.529685974 CEST	55041	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:42.529700994 CEST	443	55041	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:42.529997110 CEST	55041	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:42.530246973 CEST	55042	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:42.530400991 CEST	55042	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:42.530419111 CEST	443	55042	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:42.530929089 CEST	55042	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:42.575324059 CEST	443	55041	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:42.575341940 CEST	443	55042	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:42.780721903 CEST	443	55041	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:42.781723022 CEST	443	55042	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:42.808334112 CEST	443	55044	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.809042931 CEST	55042	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:42.809073925 CEST	443	55042	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:42.809313059 CEST	443	55042	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:42.809360027 CEST	55042	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:42.813009977 CEST	55042	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:42.814632893 CEST	55041	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:42.814656019 CEST	443	55041	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:42.814855099 CEST	443	55041	40.113.110.67	192.168.2.5
Oct 25, 2024 15:36:42.814960957 CEST	55041	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:42.826565981 CEST	55041	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:36:42.827220917 CEST	443	55045	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.848531961 CEST	55044	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.848542929 CEST	443	55044	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.849787951 CEST	55044	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.849792957 CEST	443	55044	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.850816965 CEST	55045	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.850835085 CEST	443	55045	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.851522923 CEST	55045	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.851530075 CEST	443	55045	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.976813078 CEST	443	55045	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.976912022 CEST	443	55044	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.976943016 CEST	443	55044	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.977004051 CEST	443	55044	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.977060080 CEST	55044	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.977060080 CEST	55044	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.977392912 CEST	443	55045	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.977448940 CEST	55045	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.988470078 CEST	55045	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.988470078 CEST	55045	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.988502026 CEST	443	55045	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.988514900 CEST	443	55045	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.991476059 CEST	55044	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.991502047 CEST	443	55044	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.991530895 CEST	55044	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.991538048 CEST	443	55044	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.999372005 CEST	55049	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.999414921 CEST	443	55049	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.999557972 CEST	55049	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.999686003 CEST	55050	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:42.999718904 CEST	443	55050	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:42.999789953 CEST	55050	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.000514984 CEST	55049	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.000530958 CEST	443	55049	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.000713110 CEST	55050	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.000725031 CEST	443	55050	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.021780968 CEST	443	55046	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.022967100 CEST	55046	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.022991896 CEST	443	55046	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.023842096 CEST	55046	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.023857117 CEST	443	55046	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.064805031 CEST	443	55047	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.065474987 CEST	55047	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.065511942 CEST	443	55047	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.066039085 CEST	55047	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.066046000 CEST	443	55047	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.161501884 CEST	443	55046	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.161576033 CEST	443	55046	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.161828995 CEST	55046	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.161923885 CEST	55046	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.161955118 CEST	443	55046	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.161967039 CEST	55046	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.161983013 CEST	443	55046	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.165143013 CEST	55051	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.165186882 CEST	443	55051	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.165281057 CEST	55051	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.165460110 CEST	55051	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.165472984 CEST	443	55051	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.198822975 CEST	443	55047	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.198854923 CEST	443	55047	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.198905945 CEST	443	55047	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.198914051 CEST	55047	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.198952913 CEST	55047	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.199142933 CEST	55047	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.199162006 CEST	443	55047	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.199177027 CEST	55047	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.199182987 CEST	443	55047	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.202016115 CEST	55052	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.202024937 CEST	443	55052	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.202100992 CEST	55052	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.202229023 CEST	55052	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.202241898 CEST	443	55052	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.215552092 CEST	443	55048	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.215984106 CEST	55048	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.216008902 CEST	443	55048	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.216487885 CEST	55048	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.216497898 CEST	443	55048	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.348762035 CEST	443	55048	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.348900080 CEST	443	55048	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.348963976 CEST	55048	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.349303961 CEST	55048	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.349323988 CEST	443	55048	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.349339962 CEST	55048	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.349347115 CEST	443	55048	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.352521896 CEST	55053	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.352550983 CEST	443	55053	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.352679014 CEST	55053	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.352921009 CEST	55053	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.352936029 CEST	443	55053	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.731194019 CEST	443	55050	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.731404066 CEST	443	55049	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.731993914 CEST	55050	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.732012033 CEST	443	55050	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.733103991 CEST	55050	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.733108997 CEST	443	55050	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.733661890 CEST	55049	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.733696938 CEST	443	55049	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.734363079 CEST	55049	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.734369993 CEST	443	55049	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.861423016 CEST	443	55050	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.861522913 CEST	443	55050	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.861721039 CEST	55050	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.862154007 CEST	55050	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.862174034 CEST	443	55050	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.862211943 CEST	55050	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.862217903 CEST	443	55050	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.864995956 CEST	443	55049	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.865024090 CEST	443	55049	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.865068913 CEST	443	55049	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.865108013 CEST	55049	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.865144014 CEST	55049	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.865871906 CEST	55049	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.865895033 CEST	443	55049	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.869246960 CEST	55054	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.869292974 CEST	443	55054	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.869540930 CEST	55054	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.871795893 CEST	55055	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.871824026 CEST	443	55055	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.872081995 CEST	55055	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.872577906 CEST	55054	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.872597933 CEST	443	55054	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.872922897 CEST	55055	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.872940063 CEST	443	55055	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.914803028 CEST	443	55051	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.916328907 CEST	55051	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.916361094 CEST	443	55051	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.917119026 CEST	55051	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.917126894 CEST	443	55051	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.947367907 CEST	443	55052	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.948474884 CEST	55052	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.948482037 CEST	443	55052	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:43.949362993 CEST	55052	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:43.949368000 CEST	443	55052	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.048624992 CEST	443	55051	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.048799992 CEST	443	55051	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.048863888 CEST	55051	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.049187899 CEST	55051	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.049201012 CEST	443	55051	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.049215078 CEST	55051	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.049220085 CEST	443	55051	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.054898024 CEST	55056	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.054920912 CEST	443	55056	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.055032015 CEST	55056	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.055365086 CEST	55056	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.055377007 CEST	443	55056	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.080729008 CEST	443	55052	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.080760002 CEST	443	55052	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.080805063 CEST	443	55052	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.080852985 CEST	55052	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.081233025 CEST	55052	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.081258059 CEST	443	55052	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.081274033 CEST	55052	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.081279993 CEST	443	55052	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.085388899 CEST	55057	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.085413933 CEST	443	55057	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.085495949 CEST	55057	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.085730076 CEST	443	55053	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.085936069 CEST	55057	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.085947990 CEST	443	55057	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.086419106 CEST	55053	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.086427927 CEST	443	55053	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.087249041 CEST	55053	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.087265015 CEST	443	55053	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.217304945 CEST	443	55053	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.217370987 CEST	443	55053	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.217492104 CEST	55053	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.217818022 CEST	55053	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.217818022 CEST	55053	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.217835903 CEST	443	55053	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.217844963 CEST	443	55053	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.221756935 CEST	55058	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.221812963 CEST	443	55058	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.221915960 CEST	55058	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.222407103 CEST	55058	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.222424030 CEST	443	55058	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.603158951 CEST	443	55055	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.604940891 CEST	55055	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.604964972 CEST	443	55055	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.606703997 CEST	55055	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.606719017 CEST	443	55055	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.609740973 CEST	443	55054	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.610353947 CEST	55054	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.610388041 CEST	443	55054	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.610826969 CEST	55054	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.610833883 CEST	443	55054	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.732919931 CEST	443	55055	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.733540058 CEST	443	55055	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.733586073 CEST	443	55055	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.733715057 CEST	55055	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.733715057 CEST	55055	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.733715057 CEST	55055	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.733762026 CEST	55055	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.733783960 CEST	443	55055	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.737051010 CEST	55059	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.737082958 CEST	443	55059	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.737175941 CEST	55059	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.737371922 CEST	55059	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.737382889 CEST	443	55059	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.738214016 CEST	443	55054	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.738411903 CEST	443	55054	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.738471985 CEST	55054	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.738544941 CEST	55054	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.738564968 CEST	443	55054	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.738571882 CEST	55054	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.738578081 CEST	443	55054	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.740979910 CEST	55060	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.741028070 CEST	443	55060	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.741094112 CEST	55060	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.741259098 CEST	55060	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.741282940 CEST	443	55060	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.810478926 CEST	443	55056	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.811150074 CEST	55056	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.811182976 CEST	443	55056	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.811674118 CEST	55056	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.811678886 CEST	443	55056	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.834048033 CEST	443	55057	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.834810019 CEST	55057	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.834821939 CEST	443	55057	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.835256100 CEST	55057	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.835261106 CEST	443	55057	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.941643953 CEST	443	55056	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.941744089 CEST	443	55056	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.941803932 CEST	55056	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.942002058 CEST	55056	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.942025900 CEST	443	55056	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.945569992 CEST	55061	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.945621967 CEST	443	55061	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.945693016 CEST	55061	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.945862055 CEST	55061	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.945878029 CEST	443	55061	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.962831974 CEST	443	55058	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.963330030 CEST	55058	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.963349104 CEST	443	55058	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.963881969 CEST	55058	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.963893890 CEST	443	55058	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.968693018 CEST	443	55057	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.968844891 CEST	443	55057	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.968895912 CEST	55057	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.968992949 CEST	55057	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.969002962 CEST	443	55057	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.969012022 CEST	55057	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.969017029 CEST	443	55057	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.972127914 CEST	55062	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.972138882 CEST	443	55062	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:44.972251892 CEST	55062	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.972343922 CEST	55062	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:44.972357988 CEST	443	55062	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.095467091 CEST	443	55058	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.095496893 CEST	443	55058	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.095546007 CEST	443	55058	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.095557928 CEST	55058	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.095614910 CEST	55058	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.096071005 CEST	55058	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.096071005 CEST	55058	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.096091986 CEST	443	55058	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.096116066 CEST	443	55058	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.101941109 CEST	55063	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.101958036 CEST	443	55063	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.102018118 CEST	55063	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.102705002 CEST	55063	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.102720022 CEST	443	55063	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.481421947 CEST	443	55059	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.482001066 CEST	55059	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.482017040 CEST	443	55059	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.482520103 CEST	55059	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.482525110 CEST	443	55059	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.486471891 CEST	443	55060	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.486977100 CEST	55060	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.487009048 CEST	443	55060	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.487274885 CEST	55060	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.487282038 CEST	443	55060	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.614795923 CEST	443	55059	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.614927053 CEST	443	55059	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.615173101 CEST	55059	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.615174055 CEST	55059	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.615215063 CEST	55059	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.615225077 CEST	443	55059	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.618621111 CEST	55064	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.618666887 CEST	443	55064	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.618813992 CEST	443	55060	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.618844032 CEST	443	55060	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.618845940 CEST	55064	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.618891954 CEST	443	55060	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.618913889 CEST	55060	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.618993998 CEST	55060	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.619147062 CEST	55064	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.619164944 CEST	443	55064	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.619175911 CEST	55060	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.619175911 CEST	55060	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.619195938 CEST	443	55060	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.619204998 CEST	443	55060	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.621445894 CEST	55065	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.621490955 CEST	443	55065	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.621889114 CEST	55065	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.621889114 CEST	55065	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.621918917 CEST	443	55065	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.694015026 CEST	443	55061	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.694832087 CEST	55061	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.694871902 CEST	443	55061	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.695117950 CEST	55061	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.695122957 CEST	443	55061	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.711174011 CEST	443	55062	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.712065935 CEST	55062	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.712065935 CEST	55062	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.712074995 CEST	443	55062	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.712090015 CEST	443	55062	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.827126026 CEST	443	55061	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.827200890 CEST	443	55061	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.827478886 CEST	55061	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.827478886 CEST	55061	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.827537060 CEST	55061	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.827554941 CEST	443	55061	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.830631018 CEST	55066	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.830670118 CEST	443	55066	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.830816031 CEST	55066	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.830902100 CEST	55066	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.830909967 CEST	443	55066	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.840523958 CEST	443	55062	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.840985060 CEST	443	55062	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.841119051 CEST	55062	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.841119051 CEST	55062	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.841320992 CEST	55062	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.841325998 CEST	443	55062	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.843883991 CEST	55067	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.843915939 CEST	443	55067	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.844114065 CEST	55067	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.844266891 CEST	55067	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.844283104 CEST	443	55067	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.847512007 CEST	443	55063	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.848016977 CEST	55063	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.848037004 CEST	443	55063	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.848597050 CEST	55063	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.848603964 CEST	443	55063	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.978780031 CEST	443	55063	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.979439020 CEST	443	55063	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.979564905 CEST	55063	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.979564905 CEST	55063	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.979681015 CEST	55063	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.979702950 CEST	443	55063	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.982825994 CEST	55068	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.982873917 CEST	443	55068	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:45.983016968 CEST	55068	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.983158112 CEST	55068	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:45.983175993 CEST	443	55068	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.352504969 CEST	443	55065	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.353312016 CEST	55065	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.353328943 CEST	443	55065	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.353960991 CEST	55065	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.353967905 CEST	443	55065	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.365057945 CEST	443	55064	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.365633965 CEST	55064	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.365654945 CEST	443	55064	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.366154909 CEST	55064	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.366161108 CEST	443	55064	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.485169888 CEST	443	55065	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.485260010 CEST	443	55065	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.485411882 CEST	55065	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.485594034 CEST	55065	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.485594034 CEST	55065	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.485621929 CEST	443	55065	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.485630989 CEST	443	55065	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.488966942 CEST	55069	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.489001036 CEST	443	55069	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.489289045 CEST	55069	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.489341021 CEST	55069	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.489351034 CEST	443	55069	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.499459982 CEST	443	55064	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.499485970 CEST	443	55064	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.499531984 CEST	443	55064	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.499541044 CEST	55064	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.499584913 CEST	55064	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.499799967 CEST	55064	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.499799967 CEST	55064	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.499826908 CEST	443	55064	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.499841928 CEST	443	55064	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.502671957 CEST	55070	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.502713919 CEST	443	55070	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.502795935 CEST	55070	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.502995014 CEST	55070	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.503012896 CEST	443	55070	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.585007906 CEST	443	55066	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.585639954 CEST	55066	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.585656881 CEST	443	55066	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.586288929 CEST	55066	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.586296082 CEST	443	55066	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.619010925 CEST	443	55067	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.619658947 CEST	55067	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.619669914 CEST	443	55067	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.620213985 CEST	55067	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.620228052 CEST	443	55067	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.727659941 CEST	443	55066	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.727883101 CEST	443	55066	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.727933884 CEST	443	55066	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.727987051 CEST	55066	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.728199959 CEST	55066	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.728220940 CEST	443	55066	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.728235960 CEST	55066	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.728250980 CEST	443	55066	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.735591888 CEST	55071	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.735627890 CEST	443	55071	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.735872030 CEST	55071	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.736057997 CEST	55071	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.736073017 CEST	443	55071	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.743695021 CEST	443	55068	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.744539976 CEST	55068	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.744564056 CEST	443	55068	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.745420933 CEST	55068	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.745429039 CEST	443	55068	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.764695883 CEST	443	55067	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.764861107 CEST	443	55067	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.764950991 CEST	55067	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.765532970 CEST	55067	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.765532970 CEST	55067	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.765547991 CEST	443	55067	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.765556097 CEST	443	55067	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.788348913 CEST	55072	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.788399935 CEST	443	55072	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.788557053 CEST	55072	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.788686037 CEST	55072	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.788702011 CEST	443	55072	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.877304077 CEST	443	55068	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.877334118 CEST	443	55068	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.877389908 CEST	443	55068	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.877396107 CEST	55068	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.877440929 CEST	55068	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.877763987 CEST	55068	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.877787113 CEST	443	55068	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.877806902 CEST	55068	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.877813101 CEST	443	55068	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.881350040 CEST	55073	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.881382942 CEST	443	55073	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:46.881457090 CEST	55073	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.881663084 CEST	55073	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:46.881675005 CEST	443	55073	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.246584892 CEST	443	55070	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.247188091 CEST	55070	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.247217894 CEST	443	55070	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.247808933 CEST	55070	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.247816086 CEST	443	55070	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.260667086 CEST	443	55069	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.261136055 CEST	55069	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.261152983 CEST	443	55069	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.261600018 CEST	55069	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.261606932 CEST	443	55069	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.380222082 CEST	443	55070	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.380286932 CEST	443	55070	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.380373955 CEST	55070	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.380707979 CEST	55070	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.380729914 CEST	443	55070	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.380743980 CEST	55070	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.380749941 CEST	443	55070	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.384351015 CEST	55074	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.384430885 CEST	443	55074	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.384533882 CEST	55074	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.384856939 CEST	55074	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.384871960 CEST	443	55074	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.397526979 CEST	443	55069	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.397702932 CEST	443	55069	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.397777081 CEST	55069	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.397859097 CEST	55069	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.397859097 CEST	55069	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.397877932 CEST	443	55069	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.397902966 CEST	443	55069	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.400835991 CEST	55075	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.400862932 CEST	443	55075	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.401150942 CEST	55075	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.401331902 CEST	55075	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.401344061 CEST	443	55075	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.467406034 CEST	443	55071	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.468053102 CEST	55071	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.468076944 CEST	443	55071	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.468581915 CEST	55071	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.468589067 CEST	443	55071	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.537161112 CEST	443	55072	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.537733078 CEST	55072	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.537759066 CEST	443	55072	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.538269997 CEST	55072	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.538279057 CEST	443	55072	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.599498987 CEST	443	55071	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.599565983 CEST	443	55071	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.599711895 CEST	55071	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.599874020 CEST	55071	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.599903107 CEST	443	55071	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.600099087 CEST	55071	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.600107908 CEST	443	55071	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.603157043 CEST	55076	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.603192091 CEST	443	55076	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.603307962 CEST	55076	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.603498936 CEST	55076	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.603518963 CEST	443	55076	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.615710974 CEST	443	55073	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.616236925 CEST	55073	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.616262913 CEST	443	55073	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.616698980 CEST	55073	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.616703987 CEST	443	55073	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.667267084 CEST	443	55072	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.667303085 CEST	443	55072	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.667367935 CEST	443	55072	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.667442083 CEST	55072	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.667577982 CEST	55072	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.667597055 CEST	443	55072	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.667608976 CEST	55072	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.667614937 CEST	443	55072	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.670687914 CEST	55077	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.670756102 CEST	443	55077	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.670862913 CEST	55077	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.671017885 CEST	55077	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.671037912 CEST	443	55077	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.935539007 CEST	443	55073	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.935606003 CEST	443	55073	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.935655117 CEST	55073	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.935910940 CEST	55073	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.935928106 CEST	443	55073	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.935941935 CEST	55073	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.935949087 CEST	443	55073	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.939338923 CEST	55078	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.939382076 CEST	443	55078	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:47.939517021 CEST	55078	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.939735889 CEST	55078	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:47.939754963 CEST	443	55078	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.128324032 CEST	443	55074	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.128915071 CEST	55074	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.128957987 CEST	443	55074	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.129503965 CEST	55074	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.129511118 CEST	443	55074	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.140912056 CEST	443	55075	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.141557932 CEST	55075	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.141593933 CEST	443	55075	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.142163992 CEST	55075	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.142169952 CEST	443	55075	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.260360003 CEST	443	55074	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.260430098 CEST	443	55074	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.260518074 CEST	55074	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.261013985 CEST	55074	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.261013985 CEST	55074	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.261044979 CEST	443	55074	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.261058092 CEST	443	55074	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.264733076 CEST	55079	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.264779091 CEST	443	55079	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.264910936 CEST	55079	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.265122890 CEST	55079	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.265141010 CEST	443	55079	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.271203995 CEST	443	55075	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.271298885 CEST	443	55075	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.271369934 CEST	55075	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.271994114 CEST	55075	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.272016048 CEST	443	55075	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.272027016 CEST	55075	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.272033930 CEST	443	55075	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.275269032 CEST	55080	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.275300026 CEST	443	55080	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.275563002 CEST	55080	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.275923967 CEST	55080	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.275948048 CEST	443	55080	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.334803104 CEST	443	55076	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.335851908 CEST	55076	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.335874081 CEST	443	55076	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.336308956 CEST	55076	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.336318970 CEST	443	55076	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.405020952 CEST	443	55077	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.406449080 CEST	55077	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.406481028 CEST	443	55077	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.407960892 CEST	55077	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.407967091 CEST	443	55077	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.465276003 CEST	443	55076	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.465804100 CEST	443	55076	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.465965986 CEST	55076	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.466103077 CEST	55076	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.466144085 CEST	443	55076	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.472855091 CEST	55081	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.472883940 CEST	443	55081	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.473021030 CEST	55081	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.473273993 CEST	55081	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.473288059 CEST	443	55081	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.535073042 CEST	443	55077	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.535454988 CEST	443	55077	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.535530090 CEST	55077	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.535877943 CEST	55077	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.535900116 CEST	443	55077	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.542568922 CEST	55082	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.542610884 CEST	443	55082	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.542856932 CEST	55082	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.543483019 CEST	55082	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.543504953 CEST	443	55082	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.706171989 CEST	443	55078	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.706832886 CEST	55078	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.706859112 CEST	443	55078	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.707932949 CEST	55078	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.707938910 CEST	443	55078	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.841077089 CEST	443	55078	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.841161966 CEST	443	55078	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.841284037 CEST	55078	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.848546028 CEST	55078	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.848546028 CEST	55078	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.848578930 CEST	443	55078	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.848587990 CEST	443	55078	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.857553959 CEST	55083	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.857598066 CEST	443	55083	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:48.857743979 CEST	55083	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.858170033 CEST	55083	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:48.858184099 CEST	443	55083	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.007677078 CEST	443	55080	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.009886026 CEST	443	55079	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.010880947 CEST	55080	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.010896921 CEST	443	55080	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.011440992 CEST	55080	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.011445999 CEST	443	55080	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.012180090 CEST	55079	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.012200117 CEST	443	55079	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.012880087 CEST	55079	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.012886047 CEST	443	55079	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.139883995 CEST	443	55080	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.139920950 CEST	443	55080	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.139981985 CEST	443	55080	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.140029907 CEST	55080	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.140029907 CEST	55080	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.152837992 CEST	443	55079	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.152909040 CEST	443	55079	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.153043985 CEST	55079	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.195936918 CEST	55080	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.195959091 CEST	443	55080	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.198313951 CEST	55079	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.198342085 CEST	443	55079	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.198410988 CEST	443	55081	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.212133884 CEST	55084	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.212188005 CEST	443	55084	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.212321043 CEST	55084	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.212470055 CEST	55081	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.212481022 CEST	443	55081	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.212987900 CEST	55081	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.212992907 CEST	443	55081	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.213290930 CEST	55084	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.213313103 CEST	443	55084	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.214361906 CEST	55085	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.214395046 CEST	443	55085	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.214598894 CEST	55085	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.214807034 CEST	55085	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.214819908 CEST	443	55085	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.275130987 CEST	49730	443	192.168.2.5	204.141.42.145
Oct 25, 2024 15:36:49.275171995 CEST	443	49730	204.141.42.145	192.168.2.5
Oct 25, 2024 15:36:49.296081066 CEST	443	55082	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.296813011 CEST	55082	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.296842098 CEST	443	55082	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.297327995 CEST	55082	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.297333002 CEST	443	55082	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.337274075 CEST	443	55081	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.337347984 CEST	443	55081	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.337475061 CEST	55081	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.338027954 CEST	55081	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.338027954 CEST	55081	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.338042021 CEST	443	55081	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.338052034 CEST	443	55081	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.341303110 CEST	55086	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.341352940 CEST	443	55086	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.341438055 CEST	55086	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.341603994 CEST	55086	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.341619968 CEST	443	55086	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.449101925 CEST	443	55082	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.449151993 CEST	443	55082	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.449239016 CEST	443	55082	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.449259043 CEST	55082	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.449425936 CEST	55082	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.449613094 CEST	55082	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.449613094 CEST	55082	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.449630022 CEST	443	55082	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.449639082 CEST	443	55082	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.453185081 CEST	55087	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.453228951 CEST	443	55087	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.453447104 CEST	55087	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.453620911 CEST	55087	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.453634977 CEST	443	55087	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.588747025 CEST	443	55083	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.589530945 CEST	55083	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.589546919 CEST	443	55083	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.590012074 CEST	55083	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.590015888 CEST	443	55083	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.719763041 CEST	443	55083	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.720133066 CEST	443	55083	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.720305920 CEST	55083	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.720870018 CEST	55083	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.720886946 CEST	443	55083	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.720911026 CEST	55083	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.720917940 CEST	443	55083	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.731676102 CEST	55088	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.731705904 CEST	443	55088	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.731798887 CEST	55088	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.732048988 CEST	55088	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.732069016 CEST	443	55088	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.942373037 CEST	443	55084	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.942965031 CEST	55084	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.942994118 CEST	443	55084	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.943912029 CEST	55084	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.943924904 CEST	443	55084	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.946752071 CEST	443	55085	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.947333097 CEST	55085	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.947345018 CEST	443	55085	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:49.948219061 CEST	55085	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:49.948224068 CEST	443	55085	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.071964979 CEST	443	55084	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.071999073 CEST	443	55084	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.072052956 CEST	443	55084	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.072076082 CEST	55084	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.072118044 CEST	55084	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.072813034 CEST	55084	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.072834015 CEST	443	55084	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.076946020 CEST	443	55085	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.077008963 CEST	443	55085	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.077542067 CEST	55085	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.078968048 CEST	55089	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.079015970 CEST	443	55089	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.079230070 CEST	55089	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.079235077 CEST	55085	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.079252005 CEST	443	55085	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.081099033 CEST	55089	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.081123114 CEST	443	55089	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.082885981 CEST	55090	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.082923889 CEST	443	55090	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.083064079 CEST	55090	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.083332062 CEST	55090	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.083347082 CEST	443	55090	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.086666107 CEST	443	55086	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.087147951 CEST	55086	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.087177038 CEST	443	55086	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.087825060 CEST	55086	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.087831974 CEST	443	55086	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.207719088 CEST	443	55087	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.208606005 CEST	55087	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.208619118 CEST	443	55087	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.209501982 CEST	55087	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.209508896 CEST	443	55087	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.219156027 CEST	443	55086	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.219233990 CEST	443	55086	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.219464064 CEST	55086	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.219947100 CEST	55086	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.219970942 CEST	443	55086	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.219983101 CEST	55086	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.219989061 CEST	443	55086	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.227178097 CEST	55091	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.227245092 CEST	443	55091	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.227382898 CEST	55091	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.227852106 CEST	55091	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.227871895 CEST	443	55091	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.354721069 CEST	443	55087	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.354798079 CEST	443	55087	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.354872942 CEST	55087	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.355155945 CEST	55087	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.355155945 CEST	55087	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.355170012 CEST	443	55087	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.355178118 CEST	443	55087	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.361074924 CEST	55092	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.361099005 CEST	443	55092	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.361236095 CEST	55092	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.361743927 CEST	55092	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.361768961 CEST	443	55092	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.684130907 CEST	443	55088	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.696494102 CEST	55088	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.696513891 CEST	443	55088	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.697684050 CEST	55088	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.697689056 CEST	443	55088	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.820051908 CEST	443	55090	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.820616007 CEST	55090	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.820627928 CEST	443	55090	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.821403980 CEST	55090	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.821409941 CEST	443	55090	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.823075056 CEST	443	55088	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.823123932 CEST	443	55088	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.823172092 CEST	443	55088	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.823226929 CEST	55088	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.823226929 CEST	55088	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.823527098 CEST	55088	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.823543072 CEST	443	55088	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.823551893 CEST	55088	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.823559046 CEST	443	55088	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.827533007 CEST	55093	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.827585936 CEST	443	55093	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.827658892 CEST	55093	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.827831984 CEST	55093	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.827848911 CEST	443	55093	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.832818031 CEST	443	55089	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.833379030 CEST	55089	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.833395958 CEST	443	55089	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.833931923 CEST	55089	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.833939075 CEST	443	55089	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.950364113 CEST	443	55090	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.950843096 CEST	443	55090	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.950961113 CEST	55090	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.951008081 CEST	55090	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.951026917 CEST	443	55090	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.951090097 CEST	55090	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.951096058 CEST	443	55090	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.954243898 CEST	55094	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.954277992 CEST	443	55094	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.954376936 CEST	55094	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.954561949 CEST	55094	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.954575062 CEST	443	55094	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.966180086 CEST	443	55089	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.966270924 CEST	443	55089	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.966325998 CEST	55089	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.966442108 CEST	55089	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.966442108 CEST	55089	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.966456890 CEST	443	55089	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.966466904 CEST	443	55089	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.969017982 CEST	55095	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.969067097 CEST	443	55095	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:50.969129086 CEST	55095	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.969255924 CEST	55095	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:50.969270945 CEST	443	55095	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.110636950 CEST	443	55092	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.111129045 CEST	55092	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.111145020 CEST	443	55092	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.112086058 CEST	55092	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.112092972 CEST	443	55092	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.177342892 CEST	443	55091	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.177992105 CEST	55091	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.178011894 CEST	443	55091	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.179076910 CEST	55091	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.179085016 CEST	443	55091	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.244277000 CEST	443	55092	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.244362116 CEST	443	55092	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.244427919 CEST	55092	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.248676062 CEST	55092	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.248694897 CEST	443	55092	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.248723984 CEST	55092	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.248730898 CEST	443	55092	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.255413055 CEST	55096	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.255456924 CEST	443	55096	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.255530119 CEST	55096	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.255850077 CEST	55096	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.255861998 CEST	443	55096	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.325964928 CEST	443	55091	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.325993061 CEST	443	55091	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.326055050 CEST	443	55091	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.326069117 CEST	55091	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.326119900 CEST	55091	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.326514006 CEST	55091	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.326540947 CEST	443	55091	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.326555967 CEST	55091	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.326564074 CEST	443	55091	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.331614017 CEST	55097	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.331660986 CEST	443	55097	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.331861973 CEST	55097	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.332242012 CEST	55097	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.332254887 CEST	443	55097	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.525738001 CEST	55098	443	192.168.2.5	52.149.20.212
Oct 25, 2024 15:36:51.525772095 CEST	443	55098	52.149.20.212	192.168.2.5
Oct 25, 2024 15:36:51.525979042 CEST	55098	443	192.168.2.5	52.149.20.212
Oct 25, 2024 15:36:51.526937008 CEST	55098	443	192.168.2.5	52.149.20.212
Oct 25, 2024 15:36:51.526954889 CEST	443	55098	52.149.20.212	192.168.2.5
Oct 25, 2024 15:36:51.584667921 CEST	443	55093	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.609781981 CEST	55093	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.609852076 CEST	443	55093	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.610599041 CEST	55093	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.610605001 CEST	443	55093	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.694943905 CEST	443	55094	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.696561098 CEST	55094	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.696576118 CEST	443	55094	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.698029995 CEST	55094	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.698035002 CEST	443	55094	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.736464977 CEST	443	55095	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.736936092 CEST	443	55093	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.736965895 CEST	443	55093	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.737035036 CEST	443	55093	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.737039089 CEST	55093	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.737163067 CEST	55093	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.738104105 CEST	55095	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.738126993 CEST	443	55095	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.738967896 CEST	55095	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.738980055 CEST	443	55095	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.739537001 CEST	55093	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.739559889 CEST	443	55093	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.739573956 CEST	55093	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.739583015 CEST	443	55093	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.746130943 CEST	55099	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.746192932 CEST	443	55099	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.746262074 CEST	55099	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.746669054 CEST	55099	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.746695042 CEST	443	55099	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.824596882 CEST	443	55094	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.824621916 CEST	443	55094	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.824696064 CEST	55094	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.824711084 CEST	443	55094	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.824724913 CEST	443	55094	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.824804068 CEST	55094	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.825012922 CEST	55094	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.825031042 CEST	443	55094	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.825036049 CEST	55094	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.825042009 CEST	443	55094	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.829718113 CEST	55100	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.829757929 CEST	443	55100	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.829855919 CEST	55100	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.830305099 CEST	55100	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.830315113 CEST	443	55100	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.872443914 CEST	443	55095	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.872489929 CEST	443	55095	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.872700930 CEST	443	55095	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.872699976 CEST	55095	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.872813940 CEST	55095	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.873095036 CEST	55095	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.873136997 CEST	443	55095	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.873172998 CEST	55095	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.873189926 CEST	443	55095	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.878074884 CEST	55101	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.878128052 CEST	443	55101	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.878204107 CEST	55101	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.878443956 CEST	55101	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.878478050 CEST	443	55101	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.988416910 CEST	443	55096	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.989629984 CEST	55096	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.989650011 CEST	443	55096	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:51.990971088 CEST	55096	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:51.990976095 CEST	443	55096	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.053952932 CEST	443	55097	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.054989100 CEST	55097	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.055021048 CEST	443	55097	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.055875063 CEST	55097	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.055882931 CEST	443	55097	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.160104990 CEST	443	55096	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.160141945 CEST	443	55096	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.160248995 CEST	443	55096	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.160311937 CEST	55096	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.160613060 CEST	55096	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.160630941 CEST	443	55096	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.165466070 CEST	55102	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.165524960 CEST	443	55102	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.165666103 CEST	55102	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.166246891 CEST	55102	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.166263103 CEST	443	55102	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.188743114 CEST	443	55097	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.188847065 CEST	443	55097	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.189043045 CEST	55097	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.189100027 CEST	55097	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.189100027 CEST	55097	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.189126015 CEST	443	55097	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.189140081 CEST	443	55097	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.191993952 CEST	55103	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.192033052 CEST	443	55103	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.192172050 CEST	55103	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.192317963 CEST	55103	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.192331076 CEST	443	55103	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.430629969 CEST	443	55098	52.149.20.212	192.168.2.5
Oct 25, 2024 15:36:52.430740118 CEST	55098	443	192.168.2.5	52.149.20.212
Oct 25, 2024 15:36:52.432452917 CEST	55098	443	192.168.2.5	52.149.20.212
Oct 25, 2024 15:36:52.432482958 CEST	443	55098	52.149.20.212	192.168.2.5
Oct 25, 2024 15:36:52.432739019 CEST	443	55098	52.149.20.212	192.168.2.5
Oct 25, 2024 15:36:52.434540987 CEST	55098	443	192.168.2.5	52.149.20.212
Oct 25, 2024 15:36:52.479336977 CEST	443	55098	52.149.20.212	192.168.2.5
Oct 25, 2024 15:36:52.481734991 CEST	443	55099	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.482239962 CEST	55099	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.482284069 CEST	443	55099	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.482798100 CEST	55099	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.482806921 CEST	443	55099	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.717879057 CEST	443	55100	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.719418049 CEST	55100	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.719428062 CEST	443	55100	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.720557928 CEST	55100	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.720571995 CEST	443	55100	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.731988907 CEST	443	55098	52.149.20.212	192.168.2.5
Oct 25, 2024 15:36:52.732013941 CEST	443	55098	52.149.20.212	192.168.2.5
Oct 25, 2024 15:36:52.732029915 CEST	443	55098	52.149.20.212	192.168.2.5
Oct 25, 2024 15:36:52.732106924 CEST	55098	443	192.168.2.5	52.149.20.212
Oct 25, 2024 15:36:52.732122898 CEST	443	55098	52.149.20.212	192.168.2.5
Oct 25, 2024 15:36:52.732168913 CEST	55098	443	192.168.2.5	52.149.20.212
Oct 25, 2024 15:36:52.733382940 CEST	443	55098	52.149.20.212	192.168.2.5
Oct 25, 2024 15:36:52.733434916 CEST	443	55098	52.149.20.212	192.168.2.5
Oct 25, 2024 15:36:52.733468056 CEST	55098	443	192.168.2.5	52.149.20.212
Oct 25, 2024 15:36:52.733480930 CEST	443	55098	52.149.20.212	192.168.2.5
Oct 25, 2024 15:36:52.733534098 CEST	55098	443	192.168.2.5	52.149.20.212
Oct 25, 2024 15:36:52.734087944 CEST	443	55098	52.149.20.212	192.168.2.5
Oct 25, 2024 15:36:52.734143972 CEST	443	55098	52.149.20.212	192.168.2.5
Oct 25, 2024 15:36:52.734147072 CEST	55098	443	192.168.2.5	52.149.20.212
Oct 25, 2024 15:36:52.734186888 CEST	55098	443	192.168.2.5	52.149.20.212
Oct 25, 2024 15:36:52.735172033 CEST	55098	443	192.168.2.5	52.149.20.212
Oct 25, 2024 15:36:52.735188007 CEST	443	55098	52.149.20.212	192.168.2.5
Oct 25, 2024 15:36:52.735249996 CEST	55098	443	192.168.2.5	52.149.20.212
Oct 25, 2024 15:36:52.735256910 CEST	443	55098	52.149.20.212	192.168.2.5
Oct 25, 2024 15:36:52.842526913 CEST	443	55099	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.842904091 CEST	443	55099	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.842969894 CEST	55099	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.844834089 CEST	55099	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.844861984 CEST	443	55099	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.844907999 CEST	55099	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.844916105 CEST	443	55099	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.848654032 CEST	55104	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.848697901 CEST	443	55104	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.848820925 CEST	55104	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.848925114 CEST	443	55101	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.849104881 CEST	55104	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.849121094 CEST	443	55104	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.849863052 CEST	55101	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.849872112 CEST	443	55101	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.850649118 CEST	55101	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.850652933 CEST	443	55101	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.851538897 CEST	443	55100	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.851641893 CEST	443	55100	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.851702929 CEST	55100	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.851850033 CEST	55100	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.851866961 CEST	443	55100	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.851876974 CEST	55100	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.851882935 CEST	443	55100	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.857161999 CEST	55105	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.857215881 CEST	443	55105	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.857407093 CEST	55105	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.857558966 CEST	55105	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.857569933 CEST	443	55105	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.900856018 CEST	443	55102	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.901527882 CEST	55102	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.901555061 CEST	443	55102	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.902136087 CEST	55102	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.902142048 CEST	443	55102	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.928049088 CEST	443	55103	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.928539991 CEST	55103	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.928550005 CEST	443	55103	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.929065943 CEST	55103	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.929070950 CEST	443	55103	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.981216908 CEST	443	55101	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.981307030 CEST	443	55101	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.981363058 CEST	55101	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.981949091 CEST	55101	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.981959105 CEST	443	55101	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.981971025 CEST	55101	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.981976032 CEST	443	55101	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.985316992 CEST	55106	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.985326052 CEST	443	55106	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:52.985399961 CEST	55106	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.985610008 CEST	55106	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:52.985621929 CEST	443	55106	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.032471895 CEST	443	55102	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.032493114 CEST	443	55102	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.032563925 CEST	55102	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.032566071 CEST	443	55102	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.032613039 CEST	55102	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.032989979 CEST	55102	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.033009052 CEST	443	55102	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.033021927 CEST	55102	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.033027887 CEST	443	55102	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.036708117 CEST	55107	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.036741972 CEST	443	55107	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.036834955 CEST	55107	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.037064075 CEST	55107	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.037080050 CEST	443	55107	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.061139107 CEST	443	55103	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.061173916 CEST	443	55103	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.061240911 CEST	55103	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.061248064 CEST	443	55103	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.061295986 CEST	55103	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.061626911 CEST	55103	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.061639071 CEST	443	55103	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.061650038 CEST	55103	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.061655045 CEST	443	55103	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.065256119 CEST	55108	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.065309048 CEST	443	55108	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.065573931 CEST	55108	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.065777063 CEST	55108	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.065797091 CEST	443	55108	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.579180002 CEST	443	55104	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.580368996 CEST	55104	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.580368996 CEST	55104	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.580394983 CEST	443	55104	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.580405951 CEST	443	55104	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.717318058 CEST	443	55105	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.717861891 CEST	443	55106	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.718035936 CEST	55105	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.718053102 CEST	443	55105	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.718590975 CEST	55105	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.718590975 CEST	55106	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.718597889 CEST	443	55105	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.718605042 CEST	443	55106	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.718791008 CEST	55106	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.718796968 CEST	443	55106	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.759522915 CEST	443	55107	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.760624886 CEST	55107	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.760641098 CEST	443	55107	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.761368990 CEST	55107	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.761373997 CEST	443	55107	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.818396091 CEST	443	55104	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.818428040 CEST	443	55104	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.818447113 CEST	443	55104	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.818553925 CEST	55104	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.818587065 CEST	443	55104	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.818937063 CEST	55104	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.826944113 CEST	443	55104	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.827023029 CEST	443	55104	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.827050924 CEST	55104	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.827102900 CEST	55104	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.827126980 CEST	443	55104	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.827178001 CEST	55104	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.827186108 CEST	443	55104	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.827250004 CEST	55104	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.827255011 CEST	443	55104	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.830543041 CEST	55109	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.830588102 CEST	443	55109	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.830862999 CEST	55109	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.830862999 CEST	55109	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.830894947 CEST	443	55109	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.853178024 CEST	443	55105	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.853193998 CEST	443	55105	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.853245974 CEST	443	55105	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.853287935 CEST	55105	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.853375912 CEST	55105	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.853632927 CEST	55105	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.853638887 CEST	443	55105	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.853667021 CEST	55105	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.853672981 CEST	443	55105	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.856194019 CEST	55110	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.856240988 CEST	443	55110	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.856657982 CEST	55110	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.856657982 CEST	55110	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.856702089 CEST	443	55110	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.890758991 CEST	443	55107	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.890851974 CEST	443	55107	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.890930891 CEST	55107	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.890945911 CEST	443	55107	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.890990973 CEST	443	55107	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.891014099 CEST	55107	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.891077042 CEST	55107	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.891077042 CEST	55107	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.891093969 CEST	55107	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.891104937 CEST	443	55107	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.893273115 CEST	55111	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.893300056 CEST	443	55111	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.893482924 CEST	55111	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.893482924 CEST	55111	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.893573999 CEST	443	55111	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.960131884 CEST	443	55106	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.960231066 CEST	443	55106	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.960283995 CEST	443	55106	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.960381031 CEST	55106	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.960395098 CEST	443	55106	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.960499048 CEST	55106	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.960499048 CEST	55106	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.968081951 CEST	443	55106	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.968123913 CEST	443	55106	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.968158960 CEST	443	55106	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.968214989 CEST	55106	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.968214989 CEST	55106	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.968214989 CEST	55106	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.968359947 CEST	55106	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.968359947 CEST	55106	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.968373060 CEST	443	55106	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.968381882 CEST	443	55106	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.971218109 CEST	55112	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.971303940 CEST	443	55112	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:53.971484900 CEST	55112	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.971575022 CEST	55112	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:53.971591949 CEST	443	55112	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.159746885 CEST	443	55108	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.160939932 CEST	55108	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.160939932 CEST	55108	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.160974026 CEST	443	55108	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.160995960 CEST	443	55108	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.292273998 CEST	443	55108	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.292303085 CEST	443	55108	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.292368889 CEST	443	55108	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.292402029 CEST	55108	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.292449951 CEST	55108	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.292937994 CEST	55108	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.292965889 CEST	443	55108	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.292996883 CEST	55108	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.293004036 CEST	443	55108	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.296401978 CEST	55113	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.296432972 CEST	443	55113	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.296669006 CEST	55113	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.296813011 CEST	55113	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.296822071 CEST	443	55113	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.576251984 CEST	443	55109	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.576843023 CEST	55109	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.576857090 CEST	443	55109	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.577361107 CEST	55109	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.577364922 CEST	443	55109	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.623727083 CEST	443	55111	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.624289989 CEST	55111	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.624330997 CEST	443	55111	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.624757051 CEST	55111	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.624764919 CEST	443	55111	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.626517057 CEST	443	55110	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.626835108 CEST	55110	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.626863956 CEST	443	55110	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.627216101 CEST	55110	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.627224922 CEST	443	55110	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.705987930 CEST	443	55112	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.706569910 CEST	55112	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.706643105 CEST	443	55112	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.706795931 CEST	443	55109	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.706867933 CEST	443	55109	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.706928968 CEST	55109	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.707084894 CEST	55112	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.707101107 CEST	443	55112	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.707210064 CEST	55109	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.707227945 CEST	443	55109	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.707240105 CEST	55109	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.707246065 CEST	443	55109	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.710412979 CEST	55114	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.710469961 CEST	443	55114	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.710561991 CEST	55114	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.710732937 CEST	55114	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.710766077 CEST	443	55114	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.752580881 CEST	443	55111	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.752746105 CEST	443	55111	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.752868891 CEST	55111	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.752937078 CEST	55111	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.752949953 CEST	443	55111	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.752960920 CEST	55111	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.752964973 CEST	443	55111	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.756515980 CEST	55115	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.756555080 CEST	443	55115	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.756866932 CEST	55115	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.756867886 CEST	55115	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.756918907 CEST	443	55115	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.763956070 CEST	443	55110	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.764137983 CEST	443	55110	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.764204025 CEST	55110	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.764244080 CEST	55110	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.764264107 CEST	443	55110	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.764278889 CEST	55110	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.764285088 CEST	443	55110	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.767018080 CEST	55116	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.767050028 CEST	443	55116	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.767237902 CEST	55116	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.767435074 CEST	55116	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.767457008 CEST	443	55116	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.839039087 CEST	443	55112	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.839104891 CEST	443	55112	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.839169979 CEST	55112	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.839489937 CEST	55112	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.839535952 CEST	443	55112	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.839565039 CEST	55112	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.839581966 CEST	443	55112	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.842866898 CEST	55117	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.842906952 CEST	443	55117	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:54.842961073 CEST	55117	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.843164921 CEST	55117	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:54.843178988 CEST	443	55117	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.057604074 CEST	443	55113	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.058303118 CEST	55113	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:55.058322906 CEST	443	55113	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.058851004 CEST	55113	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:55.058860064 CEST	443	55113	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.190035105 CEST	443	55113	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.190064907 CEST	443	55113	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.190128088 CEST	443	55113	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.190139055 CEST	55113	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:55.190191984 CEST	55113	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:55.190496922 CEST	55113	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:55.190520048 CEST	443	55113	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.190530062 CEST	55113	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:55.190537930 CEST	443	55113	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.454879045 CEST	443	55114	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.455513000 CEST	55114	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:55.455563068 CEST	443	55114	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.456119061 CEST	55114	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:55.456135035 CEST	443	55114	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.483138084 CEST	443	55115	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.484127998 CEST	55115	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:55.484139919 CEST	443	55115	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.484714031 CEST	55115	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:55.484720945 CEST	443	55115	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.514858961 CEST	443	55116	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.515760899 CEST	55116	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:55.515784025 CEST	443	55116	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.516421080 CEST	55116	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:55.516426086 CEST	443	55116	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.590238094 CEST	443	55114	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.591594934 CEST	443	55114	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.591674089 CEST	55114	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:55.591727018 CEST	55114	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:55.591748953 CEST	443	55114	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.591759920 CEST	55114	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:55.591768980 CEST	443	55114	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.592480898 CEST	443	55117	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.593317032 CEST	55117	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:55.593346119 CEST	443	55117	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.593842983 CEST	55117	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:55.593854904 CEST	443	55117	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.617041111 CEST	443	55115	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.617135048 CEST	443	55115	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.617208958 CEST	55115	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:55.617594004 CEST	55115	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:55.617614031 CEST	443	55115	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.617624044 CEST	55115	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:55.617634058 CEST	443	55115	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.726222038 CEST	443	55117	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.726289034 CEST	443	55117	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.726371050 CEST	55117	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:55.732768059 CEST	55117	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:55.732768059 CEST	55117	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:55.732801914 CEST	443	55117	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.732819080 CEST	443	55117	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.810779095 CEST	443	55116	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.810859919 CEST	443	55116	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.811105013 CEST	55116	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:55.813493013 CEST	55116	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:55.813529968 CEST	443	55116	13.107.246.60	192.168.2.5
Oct 25, 2024 15:36:55.813576937 CEST	55116	443	192.168.2.5	13.107.246.60
Oct 25, 2024 15:36:55.813584089 CEST	443	55116	13.107.246.60	192.168.2.5
Oct 25, 2024 15:37:04.069158077 CEST	443	49730	204.141.42.145	192.168.2.5
Oct 25, 2024 15:37:04.069257975 CEST	443	49730	204.141.42.145	192.168.2.5
Oct 25, 2024 15:37:04.069417953 CEST	49730	443	192.168.2.5	204.141.42.145
Oct 25, 2024 15:37:04.183289051 CEST	49730	443	192.168.2.5	204.141.42.145
Oct 25, 2024 15:37:04.183329105 CEST	443	49730	204.141.42.145	192.168.2.5
Oct 25, 2024 15:37:05.418994904 CEST	55120	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:37:05.419045925 CEST	443	55120	40.113.110.67	192.168.2.5
Oct 25, 2024 15:37:05.419284105 CEST	55120	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:37:05.419838905 CEST	55120	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:37:05.419857025 CEST	443	55120	40.113.110.67	192.168.2.5
Oct 25, 2024 15:37:05.423942089 CEST	55121	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:37:05.423990965 CEST	443	55121	40.113.110.67	192.168.2.5
Oct 25, 2024 15:37:05.424056053 CEST	55121	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:37:05.424601078 CEST	55121	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:37:05.424613953 CEST	443	55121	40.113.110.67	192.168.2.5
Oct 25, 2024 15:37:05.511575937 CEST	55122	443	192.168.2.5	142.250.186.164
Oct 25, 2024 15:37:05.511611938 CEST	443	55122	142.250.186.164	192.168.2.5
Oct 25, 2024 15:37:05.511710882 CEST	55122	443	192.168.2.5	142.250.186.164
Oct 25, 2024 15:37:05.512003899 CEST	55122	443	192.168.2.5	142.250.186.164
Oct 25, 2024 15:37:05.512018919 CEST	443	55122	142.250.186.164	192.168.2.5
Oct 25, 2024 15:37:06.376040936 CEST	443	55122	142.250.186.164	192.168.2.5
Oct 25, 2024 15:37:06.382827044 CEST	55122	443	192.168.2.5	142.250.186.164
Oct 25, 2024 15:37:06.382850885 CEST	443	55122	142.250.186.164	192.168.2.5
Oct 25, 2024 15:37:06.384109020 CEST	443	55122	142.250.186.164	192.168.2.5
Oct 25, 2024 15:37:06.384649038 CEST	55122	443	192.168.2.5	142.250.186.164
Oct 25, 2024 15:37:06.384884119 CEST	443	55122	142.250.186.164	192.168.2.5
Oct 25, 2024 15:37:06.431468010 CEST	55122	443	192.168.2.5	142.250.186.164
Oct 25, 2024 15:37:06.520242929 CEST	443	55121	40.113.110.67	192.168.2.5
Oct 25, 2024 15:37:06.520354033 CEST	55121	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:37:06.524807930 CEST	55121	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:37:06.524816990 CEST	443	55121	40.113.110.67	192.168.2.5
Oct 25, 2024 15:37:06.525063038 CEST	443	55121	40.113.110.67	192.168.2.5
Oct 25, 2024 15:37:06.526158094 CEST	443	55120	40.113.110.67	192.168.2.5
Oct 25, 2024 15:37:06.526237965 CEST	55120	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:37:06.528001070 CEST	55120	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:37:06.528014898 CEST	443	55120	40.113.110.67	192.168.2.5
Oct 25, 2024 15:37:06.528254986 CEST	443	55120	40.113.110.67	192.168.2.5
Oct 25, 2024 15:37:06.551918030 CEST	55120	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:37:06.552005053 CEST	55120	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:37:06.552021980 CEST	443	55120	40.113.110.67	192.168.2.5
Oct 25, 2024 15:37:06.552191019 CEST	55121	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:37:06.552275896 CEST	55120	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:37:06.552335024 CEST	55121	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:37:06.552347898 CEST	443	55121	40.113.110.67	192.168.2.5
Oct 25, 2024 15:37:06.552469015 CEST	55121	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:37:06.599332094 CEST	443	55121	40.113.110.67	192.168.2.5
Oct 25, 2024 15:37:06.599354029 CEST	443	55120	40.113.110.67	192.168.2.5
Oct 25, 2024 15:37:06.801193953 CEST	443	55121	40.113.110.67	192.168.2.5
Oct 25, 2024 15:37:06.801803112 CEST	55121	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:37:06.801817894 CEST	443	55121	40.113.110.67	192.168.2.5
Oct 25, 2024 15:37:06.801887989 CEST	55121	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:37:06.801980019 CEST	55121	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:37:06.802582026 CEST	443	55120	40.113.110.67	192.168.2.5
Oct 25, 2024 15:37:06.802983046 CEST	55120	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:37:06.802983046 CEST	55120	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:37:06.803003073 CEST	443	55120	40.113.110.67	192.168.2.5
Oct 25, 2024 15:37:06.803180933 CEST	55120	443	192.168.2.5	40.113.110.67
Oct 25, 2024 15:37:16.372030020 CEST	443	55122	142.250.186.164	192.168.2.5
Oct 25, 2024 15:37:16.372104883 CEST	443	55122	142.250.186.164	192.168.2.5
Oct 25, 2024 15:37:16.372278929 CEST	55122	443	192.168.2.5	142.250.186.164
Oct 25, 2024 15:37:18.211081982 CEST	55122	443	192.168.2.5	142.250.186.164
Oct 25, 2024 15:37:18.211108923 CEST	443	55122	142.250.186.164	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 25, 2024 15:36:01.952457905 CEST	53	53004	1.1.1.1	192.168.2.5
Oct 25, 2024 15:36:01.968249083 CEST	53	64811	1.1.1.1	192.168.2.5
Oct 25, 2024 15:36:03.259109020 CEST	53	54458	1.1.1.1	192.168.2.5
Oct 25, 2024 15:36:03.496731043 CEST	64035	53	192.168.2.5	1.1.1.1
Oct 25, 2024 15:36:03.497057915 CEST	56668	53	192.168.2.5	1.1.1.1
Oct 25, 2024 15:36:03.505382061 CEST	53	64035	1.1.1.1	192.168.2.5
Oct 25, 2024 15:36:03.506228924 CEST	53	56668	1.1.1.1	192.168.2.5
Oct 25, 2024 15:36:05.434695005 CEST	64810	53	192.168.2.5	1.1.1.1
Oct 25, 2024 15:36:05.434853077 CEST	55569	53	192.168.2.5	1.1.1.1
Oct 25, 2024 15:36:05.442188025 CEST	53	64810	1.1.1.1	192.168.2.5
Oct 25, 2024 15:36:05.442615986 CEST	53	55569	1.1.1.1	192.168.2.5
Oct 25, 2024 15:36:20.346335888 CEST	53	57597	1.1.1.1	192.168.2.5
Oct 25, 2024 15:36:24.391316891 CEST	53	61889	1.1.1.1	192.168.2.5
Oct 25, 2024 15:37:01.020970106 CEST	53	55066	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 25, 2024 15:36:03.496731043 CEST	192.168.2.5	1.1.1.1	0x4d2d	Standard query (0)	books.zoho.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 15:36:03.497057915 CEST	192.168.2.5	1.1.1.1	0x93a5	Standard query (0)	books.zoho.com	65	IN (0x0001)	false
Oct 25, 2024 15:36:05.434695005 CEST	192.168.2.5	1.1.1.1	0x98c4	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 15:36:05.434853077 CEST	192.168.2.5	1.1.1.1	0xdfc5	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Oct 25, 2024 15:36:03.505382061 CEST	1.1.1.1	192.168.2.5	0x4d2d	No error (0)	books.zoho.com	204.141.42.145	A (IP address)	IN (0x0001)	false
Oct 25, 2024 15:36:05.442188025 CEST	1.1.1.1	192.168.2.5	0x98c4	No error (0)	www.google.com	142.250.186.164	A (IP address)	IN (0x0001)	false
Oct 25, 2024 15:36:05.442615986 CEST	1.1.1.1	192.168.2.5	0xdfc5	No error (0)	www.google.com		65	IN (0x0001)	false

HTTP Request Dependency Graph

books.zoho.com

otelrules.azureedge.net

fs.microsoft.com

slscr.update.microsoft.com

https:

www.bing.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.5	49714	20.190.159.0	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:35:54 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-10-25 13:35:54 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-25 13:35:55 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 25 Oct 2024 13:34:54 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C527_BL2 x-ms-request-id: 7f9f8a48-6606-477e-817f-c5e0bc6e8d58 PPServer: PPV: 30 H: BL02EPF00027B50 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 25 Oct 2024 13:35:54 GMT Connection: close Content-Length: 11392
2024-10-25 13:35:55 UTC	11392	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.5	49715	20.190.159.0	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:35:56 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-10-25 13:35:56 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-25 13:35:57 UTC	653	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 25 Oct 2024 13:34:57 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" FdrTelemetry: &481=21&59=33&213=10&215=0&315=1&215=0&315=1&214=56&288=16.0.30389.5 Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C527_BL2 x-ms-request-id: 3b2413a3-fefc-4df9-8679-d338450411e7 PPServer: PPV: 30 H: BL02EPF0001D85D V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 25 Oct 2024 13:35:56 GMT Connection: close Content-Length: 11392
2024-10-25 13:35:57 UTC	11392	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.5	49716	20.190.159.0	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:00 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4694 Host: login.live.com
2024-10-25 13:36:00 UTC	4694	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-25 13:36:01 UTC	656	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 25 Oct 2024 13:35:00 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" FdrTelemetry: &481=21&59=5&213=280810&215=0&315=1&215=0&315=1&214=30&288=16.0.30389.5 Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C527_BL2 x-ms-request-id: 3462dde6-29ab-4556-9395-28e978085e05 PPServer: PPV: 30 H: BL02EPF0001D863 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 25 Oct 2024 13:36:00 GMT Connection: close Content-Length: 10901
2024-10-25 13:36:01 UTC	10901	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.5	49717	20.190.159.0	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:00 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4694 Host: login.live.com
2024-10-25 13:36:00 UTC	4694	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-25 13:36:01 UTC	656	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 25 Oct 2024 13:35:00 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" FdrTelemetry: &481=21&59=5&213=280810&215=0&315=1&215=0&315=1&214=30&288=16.0.30389.5 Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C527_BL2 x-ms-request-id: 0d8b7b61-01ea-4be6-a42b-43f019360ba5 PPServer: PPV: 30 H: BL02EPF0001D862 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 25 Oct 2024 13:36:00 GMT Connection: close Content-Length: 10901
2024-10-25 13:36:01 UTC	10901	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.5	49718	20.190.159.75	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:01 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-10-25 13:36:01 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-25 13:36:02 UTC	568	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 25 Oct 2024 13:35:01 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C555_SN1 x-ms-request-id: 4524f7f9-46c9-4530-a0f6-673d26dc599a PPServer: PPV: 30 H: SN1PEPF0002F14E V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 25 Oct 2024 13:36:01 GMT Connection: close Content-Length: 1918
2024-10-25 13:36:02 UTC	1918	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.5	49727	20.190.159.75	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:02 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-10-25 13:36:02 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-25 13:36:03 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 25 Oct 2024 13:35:03 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C527_BAY x-ms-request-id: aa035c26-c301-4c00-a0e0-1ed32f822b53 PPServer: PPV: 30 H: PH1PEPF0001B7A2 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 25 Oct 2024 13:36:03 GMT Connection: close Content-Length: 11412
2024-10-25 13:36:03 UTC	11412	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.5	49724	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:03 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 32 73 2b 2f 6c 64 54 4d 76 30 43 6a 31 32 46 53 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 37 37 66 65 35 38 38 38 63 37 33 62 34 30 63 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 2s+/ldTMv0Cj12FS.1Context: a77fe5888c73b40c
2024-10-25 13:36:03 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-25 13:36:03 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 32 73 2b 2f 6c 64 54 4d 76 30 43 6a 31 32 46 53 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 37 37 66 65 35 38 38 38 63 37 33 62 34 30 63 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 52 67 38 70 30 46 4f 67 39 64 36 36 51 65 45 41 4d 30 33 64 44 2f 31 6b 68 4e 4e 64 6a 7a 4e 4c 74 53 71 50 6e 49 6d 52 39 31 75 67 5a 51 4c 72 39 50 61 6f 4b 48 44 37 4b 4d 33 6d 48 45 62 78 64 58 71 69 77 54 6b 65 59 72 56 2f 66 33 31 4a 4b 6b 74 41 35 34 45 44 66 68 75 56 71 65 6e 4d 47 2f 37 54 38 53 68 44 77 4e 64 78 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 2s+/ldTMv0Cj12FS.2Context: a77fe5888c73b40c<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfRg8p0FOg9d66QeEAM03dD/1khNNdjzNLtSqPnImR91ugZQLr9PaoKHD7KM3mHEbxdXqiwTkeYrV/f31JKktA54EDfhuVqenMG/7T8ShDwNdx
2024-10-25 13:36:03 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 32 73 2b 2f 6c 64 54 4d 76 30 43 6a 31 32 46 53 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 37 37 66 65 35 38 38 38 63 37 33 62 34 30 63 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 2s+/ldTMv0Cj12FS.3Context: a77fe5888c73b40c<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-25 13:36:03 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-25 13:36:03 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 51 4f 51 6f 34 58 6f 4c 36 30 69 66 65 58 45 64 70 68 76 54 68 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: QOQo4XoL60ifeXEdphvThg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.5	49723	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:03 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 72 67 67 5a 52 6b 78 5a 2b 45 43 6a 4e 63 31 49 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 33 35 32 38 62 62 64 36 39 34 35 37 30 37 63 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: rggZRkxZ+ECjNc1I.1Context: 13528bbd6945707c
2024-10-25 13:36:03 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-25 13:36:03 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 72 67 67 5a 52 6b 78 5a 2b 45 43 6a 4e 63 31 49 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 33 35 32 38 62 62 64 36 39 34 35 37 30 37 63 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 65 55 75 30 5a 56 68 74 6f 35 38 6f 7a 61 68 31 73 44 4e 44 52 4e 4e 7a 2b 6c 58 33 46 77 6b 4f 79 70 36 54 76 31 56 4e 46 37 52 67 54 34 42 77 42 53 39 6a 52 4f 7a 79 6b 61 57 50 47 32 66 4c 36 36 76 5a 51 55 52 54 76 63 4c 6d 54 54 50 68 6a 79 5a 38 67 2f 6b 49 2f 4f 4d 62 34 61 42 4c 5a 66 4c 6e 45 77 63 43 46 72 58 36 61 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: rggZRkxZ+ECjNc1I.2Context: 13528bbd6945707c<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAeUu0ZVhto58ozah1sDNDRNNz+lX3FwkOyp6Tv1VNF7RgT4BwBS9jROzykaWPG2fL66vZQURTvcLmTTPhjyZ8g/kI/OMb4aBLZfLnEwcCFrX6a
2024-10-25 13:36:03 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 72 67 67 5a 52 6b 78 5a 2b 45 43 6a 4e 63 31 49 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 33 35 32 38 62 62 64 36 39 34 35 37 30 37 63 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: rggZRkxZ+ECjNc1I.3Context: 13528bbd6945707c
2024-10-25 13:36:03 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-25 13:36:03 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 63 31 44 32 4d 73 6b 2f 2f 30 43 7a 35 72 35 71 4e 58 79 34 7a 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: c1D2Msk//0Cz5r5qNXy4zQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49729	204.141.42.145	443	1680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:04 UTC	793	OUT	GET /api/v3/settings/templates/invoicelogo/2-9f5f6126fb9f5927bb890a052eb3e49c534d130e54c0d7eb3f0166cd0041c6789a3b840ec167bdeab503b1141cf436f4 HTTP/1.1 Host: books.zoho.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 13:36:04 UTC	708	IN	HTTP/1.1 200 Server: ZGS Date: Fri, 25 Oct 2024 13:36:04 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Set-Cookie: zalb_ba05f91d88=31fe28d59b316e1e09a069fffe50094b; Path=/; Secure; HttpOnly X-Content-Type-Options: nosniff Set-Cookie: zbcscook=a19a30f3-9292-4d6d-9e48-819ba9e1e3b5;path=/;SameSite=None;Secure;priority=high Set-Cookie: _zcsr_tmp=a19a30f3-9292-4d6d-9e48-819ba9e1e3b5;path=/;SameSite=Strict;Secure;priority=high X-Frame-Options: DENY Cache-Control: max-age=0 Pragma: no-cache Content-Disposition: attachment; filename="Invoicelogo_2023-06-20_Logo_Assek_ZohoBooks240px.png" Allow: OPTIONS, GET Expires: 0 Strict-Transport-Security: max-age=63072000
2024-10-25 13:36:04 UTC	15676	IN	Data Raw: 33 64 64 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 54 00 00 00 7a 08 06 00 00 00 e0 43 ab 47 00 00 1a 6e 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 65 78 69 66 00 00 78 da a5 9a 59 72 2d 39 b2 5d ff 31 0a 0d 01 ad 3b 30 1c b4 66 9a 81 86 af b5 83 bc a9 aa 7c 69 cf 54 12 99 49 f2 92 e7 44 00 de ec c6 11 e1 fe af ff f9 c2 ff e0 c3 52 ed a1 36 ef 36 cc 22 1f 75 d4 91 27 3f f4 f8 f3 31 bf af 29 d6 ef eb f7 d1 ea ef 4f e9 df 7f 1f 7c fe be 29 f3 ab c2 f7 f2 f3 cf 6e 3f df d3 9f df ff be e1 cf f7 34 f9 a9 fd cb 85 fa fe fd c3 fa f7 3f 8c fa 7b fd fe b7 0b fd de a8 68 45 99 1f ce ef 85 c6 ef 85 4a fe f9 43 fa bd c0 fc 5d a9 8d ee ff ba 85 75 7f be ff be ff 27 0c fc 1f f4 e5 ed 3c be fd af 9f bf fd fd df d5 89 de 69 dc Data Ascii: 3dddPNGIHDRTzCGnzTXtRaw profile type exifxYr-9]1;0f\|iTIDR66"u'?1)O\|)n?4?{hEJC]u'<i
2024-10-25 13:36:04 UTC	11702	IN	Data Raw: 48 99 ec 8f 8a c5 b4 cb 76 f9 91 86 d1 66 96 6e 25 e0 95 d1 80 a1 7e 88 80 69 50 26 21 5d c3 6d dc 9e 56 24 21 63 d2 6a 1a 11 6a d5 80 e9 54 af 4a 37 15 a9 58 8b 52 b8 b9 c0 4d 65 6c e8 0e dd 58 36 2e ed b4 72 c2 42 6a 21 2e 44 12 4e 51 52 ab b1 b0 ab 81 9b 1c d7 fb 81 e3 7a 1f ac b0 e4 d8 16 ec ff 66 19 66 d8 16 a1 ee 5c 07 fc da 71 bd 6f 38 ae 67 15 62 2a 33 3c 72 48 84 7b 1d dc eb 8f f4 e6 fb 74 6d 36 59 ae 7b 4d 09 a3 6c aa e5 a1 bd b2 88 65 7a 98 7a d5 b3 2c 74 7b 0d 52 cd 76 49 25 60 5a cc 0d 0a 32 64 30 30 0d 0a e5 df 5b cd 74 f3 25 9f 46 78 72 e5 9e d2 43 4d ca 61 28 3c 8f 50 57 f6 30 e6 fa 70 75 bb 06 4a 17 ff 3a 84 17 6c d3 32 f1 46 4b 00 0b ea c0 02 a2 b9 a8 50 59 d7 a5 e5 48 57 ab 33 2c 7f 7f 3c 72 2d cd d1 08 07 35 ef b8 de 0b 48 bc f4 05 84 Data Ascii: Hvfn%~iP&!]mV$!cjjTJ7XRMelX6.rBj!.DNQRzff\qo8gb*3<rH{tm6Y{Mlezz,t{RvI%`Z2d00[t%FxrCMa(<PW0puJ:l2FKPYHW3,<r-5H

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.5	49731	20.190.159.75	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:04 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-10-25 13:36:04 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-25 13:36:04 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 25 Oct 2024 13:35:04 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C527_BL2 x-ms-request-id: 3def7f32-93f4-43d4-abab-9a10229e54f1 PPServer: PPV: 30 H: BL02EPF0001D823 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 25 Oct 2024 13:36:04 GMT Connection: close Content-Length: 11412
2024-10-25 13:36:04 UTC	11412	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.5	49734	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:05 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:05 UTC	540	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:05 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 23 Oct 2024 06:30:03 GMT ETag: "0x8DCF32C20D7262E" x-ms-request-id: 44315f87-b01e-0070-2fac-251cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133605Z-17c5cb586f6zrq5bnguxgu7frc00000001dg000000002gyn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:05 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-25 13:36:05 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-25 13:36:05 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-25 13:36:05 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-25 13:36:05 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-25 13:36:06 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-25 13:36:06 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-25 13:36:06 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-25 13:36:06 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-25 13:36:06 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.5	49740	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:07 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:07 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 6b50d5b8-301e-005d-5751-26e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133607Z-17c5cb586f6dsb4r19gvkc9r7s00000002tg000000002rn5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:07 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.5	49739	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:07 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:07 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:07 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: fdb61705-b01e-0001-2f09-2246e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133607Z-16849878b78k46f8kzwxznephs000000093000000000gr94 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:07 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49737	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:07 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:07 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 106bf0d0-c01e-0066-1446-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133607Z-r197bdfb6b48pcqqxhenwd2uz8000000017g00000000gaef x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:07 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.5	49738	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:07 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:07 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:07 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 23ba7a24-801e-0015-5af3-24f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133607Z-r197bdfb6b4bq7nf8mnywhn9e000000001sg000000000bwh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:07 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.5	49736	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:07 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:07 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:07 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 331d1c77-401e-0029-354e-229b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133607Z-16849878b78fmrkt2ukpvh9wh4000000097000000000cndu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 13:36:07 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49743	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:08 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-25 13:36:08 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=184134 Date: Fri, 25 Oct 2024 13:36:08 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49741	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:08 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 51 78 55 55 53 4f 53 44 6c 55 79 36 6c 4e 4f 49 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 30 37 66 37 32 64 36 65 34 64 32 37 64 66 61 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: QxUUSOSDlUy6lNOI.1Context: 507f72d6e4d27dfa
2024-10-25 13:36:08 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-25 13:36:08 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 51 78 55 55 53 4f 53 44 6c 55 79 36 6c 4e 4f 49 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 30 37 66 37 32 64 36 65 34 64 32 37 64 66 61 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 65 55 75 30 5a 56 68 74 6f 35 38 6f 7a 61 68 31 73 44 4e 44 52 4e 4e 7a 2b 6c 58 33 46 77 6b 4f 79 70 36 54 76 31 56 4e 46 37 52 67 54 34 42 77 42 53 39 6a 52 4f 7a 79 6b 61 57 50 47 32 66 4c 36 36 76 5a 51 55 52 54 76 63 4c 6d 54 54 50 68 6a 79 5a 38 67 2f 6b 49 2f 4f 4d 62 34 61 42 4c 5a 66 4c 6e 45 77 63 43 46 72 58 36 61 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: QxUUSOSDlUy6lNOI.2Context: 507f72d6e4d27dfa<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAeUu0ZVhto58ozah1sDNDRNNz+lX3FwkOyp6Tv1VNF7RgT4BwBS9jROzykaWPG2fL66vZQURTvcLmTTPhjyZ8g/kI/OMb4aBLZfLnEwcCFrX6a
2024-10-25 13:36:08 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 51 78 55 55 53 4f 53 44 6c 55 79 36 6c 4e 4f 49 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 30 37 66 37 32 64 36 65 34 64 32 37 64 66 61 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: QxUUSOSDlUy6lNOI.3Context: 507f72d6e4d27dfa
2024-10-25 13:36:08 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-25 13:36:08 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 47 6a 6b 74 63 73 7a 32 36 30 43 53 4e 54 32 53 2f 70 34 4b 78 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: Gjktcsz260CSNT2S/p4KxA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49742	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:08 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 4e 6e 6a 34 63 7a 30 56 6f 6b 47 4a 44 45 71 31 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 37 66 30 33 33 65 66 64 30 37 62 66 64 63 39 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: Nnj4cz0VokGJDEq1.1Context: e7f033efd07bfdc9
2024-10-25 13:36:08 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-25 13:36:08 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 4e 6e 6a 34 63 7a 30 56 6f 6b 47 4a 44 45 71 31 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 37 66 30 33 33 65 66 64 30 37 62 66 64 63 39 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 52 67 38 70 30 46 4f 67 39 64 36 36 51 65 45 41 4d 30 33 64 44 2f 31 6b 68 4e 4e 64 6a 7a 4e 4c 74 53 71 50 6e 49 6d 52 39 31 75 67 5a 51 4c 72 39 50 61 6f 4b 48 44 37 4b 4d 33 6d 48 45 62 78 64 58 71 69 77 54 6b 65 59 72 56 2f 66 33 31 4a 4b 6b 74 41 35 34 45 44 66 68 75 56 71 65 6e 4d 47 2f 37 54 38 53 68 44 77 4e 64 78 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: Nnj4cz0VokGJDEq1.2Context: e7f033efd07bfdc9<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfRg8p0FOg9d66QeEAM03dD/1khNNdjzNLtSqPnImR91ugZQLr9PaoKHD7KM3mHEbxdXqiwTkeYrV/f31JKktA54EDfhuVqenMG/7T8ShDwNdx
2024-10-25 13:36:08 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 4e 6e 6a 34 63 7a 30 56 6f 6b 47 4a 44 45 71 31 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 37 66 30 33 33 65 66 64 30 37 62 66 64 63 39 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: Nnj4cz0VokGJDEq1.3Context: e7f033efd07bfdc9<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-25 13:36:08 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-25 13:36:08 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 63 63 75 39 41 39 52 48 73 45 65 38 56 6f 48 33 4f 42 58 65 45 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: ccu9A9RHsEe8VoH3OBXeEQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49744	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:08 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:08 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 7aa3dd97-101e-005a-6a20-26882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133608Z-17c5cb586f6hhlf5mrwgq3erx800000001q000000000545e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:08 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49747	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:08 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:08 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: d2ec1471-a01e-0032-1827-261949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133608Z-17c5cb586f6g6g2sbe6edp75y400000002k0000000007kgx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:08 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49745	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:08 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:08 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: b99e46b1-a01e-001e-0499-2549ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133608Z-15b8d89586frzkk2umu6w8qnt80000000g00000000005t9t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:09 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49746	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:08 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:08 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 4755be7f-e01e-0052-062b-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133608Z-16849878b78lhh9t0fb3392enw000000096000000000avfz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:08 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49748	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:08 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:08 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:08 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: e84b733d-701e-005c-1bb8-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133608Z-16849878b78k46f8kzwxznephs000000097g0000000059hg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 13:36:08 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49751	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:09 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:09 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:09 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133609Z-16849878b785jrf8dn0d2rczaw00000001rg00000000d7y4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:09 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	49750	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:09 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:09 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:09 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 53592b39-c01e-0082-1ef3-24af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133609Z-15b8d89586f8nxpt6ys645x5v000000001u0000000005z1p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 13:36:09 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49749	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:09 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-25 13:36:09 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=184133 Date: Fri, 25 Oct 2024 13:36:09 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-25 13:36:09 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.5	49752	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:09 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:09 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1b2fb3ba-201e-0033-65ce-20b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133609Z-16849878b78j5kdg3dndgqw0vg000000026g00000000n1e5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:09 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49753	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:09 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:09 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: d7788b78-601e-0084-2f37-266b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133609Z-15b8d89586fst84k5f3z220tec0000000g6g0000000045yp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:09 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	49754	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:10 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:10 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 7de7ed35-901e-005b-7c14-222005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133610Z-16849878b785jrf8dn0d2rczaw00000001sg00000000aqrf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:10 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49756	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:10 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:10 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: f94f539d-b01e-001e-773a-260214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133610Z-15b8d89586fwzdd8urmg0p1ebs0000000aug00000000a6mf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:10 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49755	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:10 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:10 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 2fd6bd5d-d01e-007a-394f-26f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133610Z-16849878b78hz7zj8u0h2zng1400000009ag00000000ebks x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:10 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49757	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:10 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:10 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 94fafadb-001e-0049-3f27-265bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133610Z-17c5cb586f6f69jxsre6kx2wmc00000002xg00000000920a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:10 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49758	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:10 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:10 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:10 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: fc173041-601e-0097-79ad-24f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133610Z-15b8d89586flspj6y6m5fk442w00000006fg000000000b30 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:10 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49759	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:10 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:11 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:11 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: e7bd3bd0-f01e-003c-42e3-258cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133611Z-15b8d89586ffsjj9qb0gmb1stn00000004v00000000035by x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:11 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	49760	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:11 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:11 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:11 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: b26f0bb8-d01e-00ad-3518-26e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133611Z-16849878b78hh85qc40uyr8sc800000000w000000000c2dm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:11 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49762	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:11 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:11 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:11 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 864201cb-901e-0015-2b18-26b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133611Z-16849878b78k8q5pxkgux3mbgg00000009a0000000003fqq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:11 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49761	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:11 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:11 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:11 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: faf669f2-101e-0065-23a4-264088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133611Z-16849878b78gvgmlcfru6nuc54000000094g00000000kzdd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:11 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49763	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:11 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:11 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:11 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 0fc246dd-801e-0035-4529-26752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133611Z-15b8d89586flzzks5bs37v2b9000000004t0000000009xr0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:11 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49764	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:11 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:12 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:11 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 4af8c3a5-e01e-0033-1562-264695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133611Z-16849878b78wv88bk51myq5vxc00000000y00000000066es x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:12 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49765	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:11 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:12 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:12 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: ea438a18-a01e-0053-68ef-258603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133612Z-r197bdfb6b4t7wszkhsu1pyev000000001gg00000000dt96 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:12 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49766	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:12 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:12 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:12 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 3cf1b782-701e-0001-32e5-21b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133612Z-16849878b785dznd7xpawq9gcn00000001w000000000krkw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:12 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49767	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:12 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:12 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:12 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 1290ce53-d01e-002b-7905-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133612Z-16849878b786fl7gm2qg4r5y7000000000u000000000gx0b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:12 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49768	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:12 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:12 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:12 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 2760be74-301e-0096-200b-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133612Z-16849878b78wv88bk51myq5vxc00000000wg00000000af8t x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:12 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49769	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:12 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:12 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:12 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 131e52ce-d01e-002b-553b-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133612Z-16849878b78hz7zj8u0h2zng1400000009bg00000000bbxz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:12 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	49770	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:12 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:13 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:12 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: e79f0600-d01e-00ad-4ef2-24e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133612Z-15b8d89586f6nn8zb8x99wuenc00000001h000000000b8rt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:13 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49771	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:12 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:13 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:13 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 960fe732-901e-0016-4ad7-26efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133612Z-r197bdfb6b48pcqqxhenwd2uz800000001cg000000005wn0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 13:36:13 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	49773	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:12 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:13 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:12 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 27632888-301e-0096-61d8-21e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133612Z-16849878b78p8hrf1se7fucxk800000001k00000000020ce x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:13 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	49772	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:12 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:13 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:13 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 488bf4d4-001e-00a2-2656-26d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133613Z-17c5cb586f6hhlf5mrwgq3erx800000001h000000000c4pv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:13 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49774	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:13 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:13 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:13 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: b13276b3-c01e-00a2-52fc-242327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133613Z-r197bdfb6b466qclztvgs64z10000000020000000000b102 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:13 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49775	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:13 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:14 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:13 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 25f4145c-101e-005a-559b-24882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133613Z-15b8d89586fbt6nf34bm5uw08n00000004bg00000000dcx0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:14 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49778	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:13 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:14 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:13 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 0a130610-701e-001e-4a1f-26f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133613Z-r197bdfb6b4bq7nf8mnywhn9e000000001rg000000002yde x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:14 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49777	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:13 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:14 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:13 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 43d69f68-001e-00ad-61b4-24554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133613Z-15b8d89586fbt6nf34bm5uw08n00000004h0000000004tmn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:14 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49776	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:13 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:14 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:13 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 3f3879b0-501e-0035-0b40-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133613Z-16849878b787sbpl0sv29sm89s000000099g00000000gyrg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:14 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49779	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:14 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=oVgA1lYdzvTE4ya&MD=b7RoooAL HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-25 13:36:14 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 0dae6f7e-a7b6-4f3b-960e-60dfea72c4af MS-RequestId: bd9b6dfa-2996-4d09-b0c3-fba3506d4554 MS-CV: VkYkqu2x4UWCQPUp.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 25 Oct 2024 13:36:13 GMT Connection: close Content-Length: 24490
2024-10-25 13:36:14 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-25 13:36:14 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49781	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:14 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:14 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:14 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: de733a63-101e-00a2-1415-269f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133614Z-r197bdfb6b4bq7nf8mnywhn9e000000001qg000000005g8d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:14 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49782	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:14 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:14 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:14 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 168e2c35-b01e-00ab-10df-25dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133614Z-16849878b78k46f8kzwxznephs000000098g000000001bw1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:14 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.5	49783	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:14 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:14 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:14 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 99f07890-301e-0051-29d2-2538bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133614Z-16849878b7898p5f6vryaqvp5800000001e000000000ac33 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:14 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49784	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:14 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:14 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:14 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: a706a42d-501e-008c-4ef2-24cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133614Z-r197bdfb6b47gqdjqh2kwsuz8c00000000w000000000k2wg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:14 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	49785	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:14 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:14 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:14 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: d4d27aa7-601e-0002-1812-22a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133614Z-16849878b78qf2gleqhwczd21s00000000x00000000002a5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:14 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49786	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:15 UTC	2100	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1729863342835&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-10-25 13:36:15 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-10-25 13:36:15 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-10-25 13:36:15 UTC	478	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 1179ADABEB3045A28A370E2986ECDD10 Ref B: LAX311000115045 Ref C: 2024-10-25T13:36:15Z Date: Fri, 25 Oct 2024 13:36:15 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.3eed0117.1729863375.aa174a

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49787	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:15 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:15 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:15 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 809859d7-601e-00ab-6828-2666f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133615Z-r197bdfb6b4b4pw6nr8czsrctg000000015000000000ea3w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:15 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49788	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:15 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:15 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:15 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 71d2c1fc-001e-00a2-01de-21d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133615Z-16849878b78j5kdg3dndgqw0vg00000002cg0000000036fx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:15 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	49789	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:15 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:15 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:15 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 4a7bd2a8-301e-0096-209e-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133615Z-16849878b78smng4k6nq15r6s4000000022g00000000e47b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 13:36:15 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.5	49791	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:15 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:15 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:15 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 34cbbb6f-001e-0046-0fdf-25da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133615Z-16849878b78p8hrf1se7fucxk800000001h0000000005hpm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 13:36:15 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49790	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:15 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:15 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:15 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c1b2f9d4-701e-0098-1062-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133615Z-16849878b78j5kdg3dndgqw0vg000000027000000000hs39 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:15 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49792	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:16 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:16 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:16 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 6c6fa777-201e-003c-1958-2630f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133616Z-17c5cb586f67p8ffw0hbk5rahw00000002w0000000001q0b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:16 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49793	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:16 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:16 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:16 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: c3c7965e-601e-0050-4428-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133616Z-17c5cb586f6z6tw6g7cmdv30m800000001tg000000002gr4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:16 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49794	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:16 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:16 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:16 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 26e7cda7-e01e-001f-32f8-251633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133616Z-16849878b78hz7zj8u0h2zng1400000009eg000000002g5k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:16 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49795	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:16 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:16 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:16 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: d13b9d4f-c01e-0014-770d-26a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133616Z-17c5cb586f6dsb4r19gvkc9r7s00000002ug0000000008fz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:16 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49796	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:16 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:16 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:16 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 100b0a78-f01e-0003-754e-224453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133616Z-16849878b785dznd7xpawq9gcn0000000200000000009vmd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:16 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49797	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:17 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:17 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:17 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 9016a745-201e-0096-70e6-25ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133617Z-16849878b78z5q7jpbgf6e9mcw00000009f000000000255r x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:17 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49798	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:17 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:17 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:17 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: e574f622-301e-0052-4beb-2565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133617Z-16849878b78nx5sne3fztmu6xc00000001p0000000002xue x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:17 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49800	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:17 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:17 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:17 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 6cbbe1db-401e-0083-6516-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133617Z-16849878b78nx5sne3fztmu6xc00000001g000000000fq43 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:17 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49801	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:17 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:17 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:17 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: d4a93cd8-001e-008d-65f5-24d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133617Z-15b8d89586fx2hlt035xdehq580000000g70000000008pwb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:17 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49802	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:18 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:18 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:18 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: fc13fe58-401e-000a-0af3-244a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133618Z-15b8d89586f4zwgbgswvrvz4vs00000001sg000000009gqr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:18 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49803	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:18 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:18 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:18 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 7842422a-e01e-003c-05ee-25c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133618Z-16849878b78dsttbr1qw36rxs8000000098g00000000d8h3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:18 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49804	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:18 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:18 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:18 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: ffa56774-c01e-007a-6c38-26b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133618Z-16849878b785dznd7xpawq9gcn00000001xg00000000g3qn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:18 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49805	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:18 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:18 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:18 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: ab726c5d-b01e-0098-175a-26cead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133618Z-17c5cb586f68ph8xe1hpx7aynw00000002x0000000000dbd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:18 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49799	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:18 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:18 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:18 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 53fe968a-201e-0096-055e-26ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133618Z-16849878b786fl7gm2qg4r5y7000000000z0000000001ra1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:18 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49806	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:19 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:19 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:19 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: ac69ef67-e01e-001f-7714-221633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133619Z-16849878b78x6gn56mgecg60qc00000002gg0000000001cg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:19 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49807	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:19 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:19 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:19 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: d9732123-901e-007b-1098-25ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133619Z-16849878b78fssff8btnns3b1400000000yg0000000043af x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:19 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49808	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:19 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:19 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:19 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 933aac65-d01e-007a-51aa-26f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133619Z-16849878b78q4pnrt955f8nkx8000000091g00000000m9kp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:19 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49809	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:19 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:19 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:19 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: fa910cef-e01e-003c-72dd-21c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133619Z-16849878b78z5q7jpbgf6e9mcw00000009d0000000008s2d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:19 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49810	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:19 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:19 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:19 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: cf3643bb-401e-0078-69a3-264d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133619Z-16849878b78j7llf5vkyvvcehs00000001kg00000000k6b2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:19 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	49811	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:19 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:20 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:20 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 796b115c-001e-005a-3627-26c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133620Z-17c5cb586f6mkpfk79wxvcahc0000000012g000000003qb3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:20 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49814	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:20 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:20 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:20 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 28e3a13f-d01e-0049-4f16-25e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133620Z-r197bdfb6b4t7wszkhsu1pyev000000001g000000000ektt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 13:36:20 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49815	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:20 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:20 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:20 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: c561987e-801e-0015-0d0b-22f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133620Z-16849878b78rjhv97f3nhawr7s000000094000000000m637 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:20 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49816	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:20 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:20 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:20 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 4e85c478-401e-002a-713d-26c62e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133620Z-r197bdfb6b46kdskt78qagqq1c00000000q0000000008810 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:20 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	49817	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:20 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:20 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:20 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: c52d6895-f01e-001f-0bd3-205dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133620Z-16849878b78bcpfn2qf7sm6hsn0000000270000000009rs0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:20 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49813	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:20 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 53 34 70 4d 63 39 34 7a 46 55 32 61 33 66 72 49 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 61 63 33 35 34 33 32 65 63 64 36 37 31 63 34 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: S4pMc94zFU2a3frI.1Context: 9ac35432ecd671c4
2024-10-25 13:36:20 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-25 13:36:20 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 53 34 70 4d 63 39 34 7a 46 55 32 61 33 66 72 49 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 61 63 33 35 34 33 32 65 63 64 36 37 31 63 34 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 52 67 38 70 30 46 4f 67 39 64 36 36 51 65 45 41 4d 30 33 64 44 2f 31 6b 68 4e 4e 64 6a 7a 4e 4c 74 53 71 50 6e 49 6d 52 39 31 75 67 5a 51 4c 72 39 50 61 6f 4b 48 44 37 4b 4d 33 6d 48 45 62 78 64 58 71 69 77 54 6b 65 59 72 56 2f 66 33 31 4a 4b 6b 74 41 35 34 45 44 66 68 75 56 71 65 6e 4d 47 2f 37 54 38 53 68 44 77 4e 64 78 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: S4pMc94zFU2a3frI.2Context: 9ac35432ecd671c4<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfRg8p0FOg9d66QeEAM03dD/1khNNdjzNLtSqPnImR91ugZQLr9PaoKHD7KM3mHEbxdXqiwTkeYrV/f31JKktA54EDfhuVqenMG/7T8ShDwNdx
2024-10-25 13:36:20 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 53 34 70 4d 63 39 34 7a 46 55 32 61 33 66 72 49 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 61 63 33 35 34 33 32 65 63 64 36 37 31 63 34 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: S4pMc94zFU2a3frI.3Context: 9ac35432ecd671c4<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-25 13:36:20 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-25 13:36:20 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 4d 30 36 4b 71 76 46 51 74 6b 71 6d 55 6d 7a 73 6c 34 52 56 4e 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: M06KqvFQtkqmUmzsl4RVNQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49812	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:20 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 62 4b 32 53 4b 79 49 34 4b 55 36 53 31 47 36 2f 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 39 30 32 34 64 36 34 62 36 31 62 30 33 36 61 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: bK2SKyI4KU6S1G6/.1Context: 39024d64b61b036a
2024-10-25 13:36:20 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-25 13:36:20 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 62 4b 32 53 4b 79 49 34 4b 55 36 53 31 47 36 2f 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 39 30 32 34 64 36 34 62 36 31 62 30 33 36 61 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 65 55 75 30 5a 56 68 74 6f 35 38 6f 7a 61 68 31 73 44 4e 44 52 4e 4e 7a 2b 6c 58 33 46 77 6b 4f 79 70 36 54 76 31 56 4e 46 37 52 67 54 34 42 77 42 53 39 6a 52 4f 7a 79 6b 61 57 50 47 32 66 4c 36 36 76 5a 51 55 52 54 76 63 4c 6d 54 54 50 68 6a 79 5a 38 67 2f 6b 49 2f 4f 4d 62 34 61 42 4c 5a 66 4c 6e 45 77 63 43 46 72 58 36 61 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: bK2SKyI4KU6S1G6/.2Context: 39024d64b61b036a<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAeUu0ZVhto58ozah1sDNDRNNz+lX3FwkOyp6Tv1VNF7RgT4BwBS9jROzykaWPG2fL66vZQURTvcLmTTPhjyZ8g/kI/OMb4aBLZfLnEwcCFrX6a
2024-10-25 13:36:20 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 62 4b 32 53 4b 79 49 34 4b 55 36 53 31 47 36 2f 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 39 30 32 34 64 36 34 62 36 31 62 30 33 36 61 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: bK2SKyI4KU6S1G6/.3Context: 39024d64b61b036a
2024-10-25 13:36:20 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-25 13:36:20 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 38 74 7a 2f 30 49 31 7a 6c 6b 65 62 61 37 4b 57 2f 67 61 77 30 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 8tz/0I1zlkeba7KW/gaw0Q.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	49818	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:20 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:21 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:20 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 2f548e5b-201e-003c-5d24-2130f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133620Z-16849878b78p8hrf1se7fucxk800000001h0000000005hxz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:21 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49819	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:21 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:21 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:21 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 4104ef10-001e-0046-6521-26da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133621Z-r197bdfb6b42rt68rzg9338g1g00000001rg000000009hnn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:21 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49820	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:21 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:21 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:21 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: e37aa075-401e-0067-7f3f-2609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133621Z-r197bdfb6b4hdk8h12qtxfwscn000000016g0000000097fr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:21 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49821	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:21 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:21 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:21 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 28e57d84-e01e-003c-4a46-26c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133621Z-17c5cb586f6qkkscezt8hb00a000000002s00000000060vw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:21 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	49822	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:21 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:21 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:21 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: f68a3f25-f01e-0052-02bd-259224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133621Z-16849878b78bcpfn2qf7sm6hsn000000024000000000ger4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:21 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	49823	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:21 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:21 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 9cbc484f-801e-008f-0ca3-262c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133621Z-15b8d89586fvk4kmbg8pf84y8800000001e0000000009m16 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:21 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49824	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:21 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:22 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:21 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: baf401f8-c01e-00ad-1d9e-26a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133621Z-16849878b78q4pnrt955f8nkx8000000095g00000000azur x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:22 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	49825	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:22 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:22 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:22 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 273a8d1a-001e-0034-0d8c-21dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133622Z-16849878b78p8hrf1se7fucxk800000001eg00000000ct8s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:22 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49826	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:22 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:22 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:22 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 9bebe7cf-201e-0033-1046-26b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133622Z-17c5cb586f6mkpfk79wxvcahc000000000z00000000096fb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:22 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49827	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:22 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:22 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:22 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 19a18c92-701e-0098-0fb0-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133622Z-16849878b78tg5n42kspfr0x4800000000pg0000000068xg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:22 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49828	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:22 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:22 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:22 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: d6a45923-201e-006e-3dec-25bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133622Z-17c5cb586f6z6tw6g7cmdv30m800000001qg0000000089t4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:22 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	49829	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:22 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:22 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:22 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 9f682ba9-701e-006f-730e-26afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133622Z-17c5cb586f6g6g2sbe6edp75y400000002g000000000bcpd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:22 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49830	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:22 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:23 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:22 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cd04a713-f01e-003f-7315-26d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133622Z-16849878b78gvgmlcfru6nuc5400000009ag000000001z70 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:23 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49831	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:22 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:23 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:23 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 20049dc1-d01e-0014-1b33-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133623Z-16849878b786vsxz21496wc2qn00000009e0000000004bgt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:23 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	49832	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:23 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:23 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:23 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 3c823cf0-801e-00a3-6533-267cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133623Z-16849878b78j7llf5vkyvvcehs00000001kg00000000k6f9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:23 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	49833	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:23 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:23 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:23 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 14889e7f-701e-0053-13f2-253a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133623Z-16849878b78qf2gleqhwczd21s00000000u0000000009m1n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:23 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	49834	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:23 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:24 UTC	591	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:23 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 9bc6d014-801e-008f-4946-262c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133623Z-r197bdfb6b4jlq9hb8xf0re6t400000000ng000000006f54 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-25 13:36:24 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49835	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:23 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:23 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:23 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 18e0c3bd-301e-001f-11f3-24aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133623Z-17c5cb586f6mhqqb91r8trf2c800000001a000000000dvez x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:23 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49836	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:23 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:23 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:23 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 2e8006eb-901e-0083-471c-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133623Z-16849878b78c5zx4gw8tcga1b400000009700000000077av x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:23 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49837	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:23 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:24 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:24 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 98d07b8f-f01e-0096-1a27-2610ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133624Z-r197bdfb6b4jlq9hb8xf0re6t400000000p0000000006a44 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 13:36:24 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	49838	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:24 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:24 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:24 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 04bfc9b2-001e-0017-54ad-260c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133624Z-16849878b786vsxz21496wc2qn00000009c000000000a6c1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:24 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	49839	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:24 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:24 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:24 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 275a1f3a-c01e-007a-47a4-26b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133624Z-16849878b78fssff8btnns3b1400000000xg000000007tn0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:24 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49840	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:24 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:24 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:24 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 9cf5c506-801e-0083-443d-26f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133624Z-17c5cb586f6f69jxsre6kx2wmc00000002w000000000basw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:24 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	49841	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:24 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:24 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:24 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: e0b43d58-801e-00ac-6858-26fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133624Z-17c5cb586f6dsb4r19gvkc9r7s00000002tg000000002sbq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:24 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49842	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:24 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:24 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:24 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 7f795d00-001e-0082-463f-265880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133624Z-15b8d89586fzhrwgk23ex2bvhw00000003c000000000612e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:24 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	54948	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:25 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:25 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:25 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 16f71f95-f01e-0099-73fb-259171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133625Z-16849878b78fssff8btnns3b1400000000ug00000000f633 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:25 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	54949	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:25 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:25 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:25 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 53cb03fc-601e-0084-2ff2-246b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133625Z-r197bdfb6b429k2s6br3k49qn400000006r00000000080sa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:25 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	54950	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:25 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:25 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:25 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 2901062c-201e-0003-4058-26f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133625Z-17c5cb586f6tzc2wdxudxz0zw8000000024g00000000d2d3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 13:36:25 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	54951	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:25 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:25 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:25 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: b18c396c-401e-0015-7180-260e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133625Z-16849878b78fssff8btnns3b1400000000yg0000000043uf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:25 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	54952	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:25 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:25 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:25 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 9a0db76d-d01e-0017-4396-25b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133625Z-16849878b78j5kdg3dndgqw0vg00000002b0000000008pr9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 13:36:25 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	54954	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:26 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:26 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:26 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 654233af-a01e-001e-0b27-2149ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133626Z-16849878b785f8wh85a0w3ennn000000095000000000gwep x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:26 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	54955	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:26 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:26 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:26 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 2f6e7a45-901e-0083-466a-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133626Z-16849878b78smng4k6nq15r6s4000000022g00000000e4tr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:26 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	54956	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:26 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:26 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:26 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 92eac08a-601e-0001-29b2-26faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133626Z-16849878b785f8wh85a0w3ennn000000095000000000gwf1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:26 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	54957	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:26 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:26 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:26 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 0cf7dd75-a01e-003d-3e63-2698d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133626Z-16849878b78k8q5pxkgux3mbgg00000009a0000000003gf9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 13:36:26 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	54958	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:26 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:26 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:26 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: a1e8ab16-701e-0050-601c-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133626Z-16849878b78bcpfn2qf7sm6hsn000000025g00000000ep51 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:26 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	54959	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:27 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:27 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:27 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: b9c92f65-401e-0016-1c27-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133627Z-16849878b78q4pnrt955f8nkx8000000095000000000br31 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:27 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	54960	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:27 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:27 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:27 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 6651509d-f01e-00aa-4661-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133627Z-17c5cb586f67hhlz1ecw6yxtp000000002wg00000000aqg4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:27 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	54961	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:27 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:27 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:27 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: f5f98d55-001e-0049-58e4-215bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133627Z-16849878b78k8q5pxkgux3mbgg00000009a0000000003gga x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:27 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.5	54962	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:27 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:27 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:27 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: eb22034c-601e-0070-2f28-26a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133627Z-r197bdfb6b4t7wszkhsu1pyev000000001k000000000b6g6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:27 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	54963	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:27 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:27 UTC	591	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:27 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 9800c975-801e-008c-0e2c-267130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133627Z-r197bdfb6b4hsj5bywyqk9r2xw00000001zg00000000708v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-25 13:36:27 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	54964	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:28 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:28 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:28 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: baa41b4f-401e-00ac-2c28-210a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133628Z-16849878b78hz7zj8u0h2zng14000000099000000000ha7w x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:28 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	54965	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:28 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:28 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:28 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 28718399-201e-0003-7628-26f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133628Z-17c5cb586f6dsb4r19gvkc9r7s00000002sg0000000056pd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:28 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	54966	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:28 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:28 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:28 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 60449bdf-301e-005d-500b-26e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133628Z-16849878b7898p5f6vryaqvp5800000001e000000000acqa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 13:36:28 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	54967	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:28 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:28 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:28 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 26ef0c66-a01e-0070-7425-26573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133628Z-r197bdfb6b4b4pw6nr8czsrctg000000014000000000gq97 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:28 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	54968	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:28 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:28 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:28 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: ccbf99dc-401e-0035-1c33-2682d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133628Z-17c5cb586f6z6tw6g7cmdv30m800000001p000000000a1de x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:28 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	54969	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:29 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:29 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:29 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: a9595a72-801e-0015-2bad-26f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133629Z-16849878b78fmrkt2ukpvh9wh4000000095000000000hffd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:29 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	54970	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:29 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:29 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:29 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 36aee691-501e-0047-745d-26ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133629Z-16849878b7898p5f6vryaqvp5800000001h0000000000rff x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 13:36:29 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	54972	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:29 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:29 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:29 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 6afd71f5-301e-003f-7d9e-26266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133629Z-16849878b785g992cz2s9gk35c00000009cg000000001r89 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:29 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	54971	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:29 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:29 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:29 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 474bc074-b01e-0002-67b0-201b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133629Z-16849878b787sbpl0sv29sm89s000000098g00000000hhk2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:29 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	54973	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:29 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:29 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:29 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 697bb720-201e-0071-0781-25ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133629Z-16849878b78jfqwd1dsrhqg3aw00000009c000000000aeev x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:29 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	54975	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:30 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:30 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:30 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 3d4cb055-601e-0097-01e5-21f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133630Z-16849878b786vsxz21496wc2qn000000098g00000000mbb8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:30 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	54974	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:30 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:30 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:30 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 622dd3a6-e01e-0003-140d-260fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133630Z-16849878b788tnsxzb2smucwdc00000009bg000000005vsr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:30 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.5	54976	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:30 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:30 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:30 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: e081a540-501e-0035-2133-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133630Z-16849878b78j5kdg3dndgqw0vg000000029000000000ds23 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:30 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	54977	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:30 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:30 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:30 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: f2380685-a01e-0002-0958-265074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133630Z-17c5cb586f6gkqkwd0x1ge8t0400000000ug00000000946m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:30 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	54978	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:30 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:30 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:30 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 4a3ae400-b01e-0001-38e4-2546e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133630Z-16849878b78bcpfn2qf7sm6hsn00000002a0000000000htn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:30 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	54979	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:31 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:31 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:31 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 1e800eab-b01e-001e-7ff5-240214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133631Z-15b8d89586fx2hlt035xdehq580000000g9g000000004adf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:31 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	54980	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:31 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:31 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:31 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 12d17a45-e01e-0051-1e28-2684b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133631Z-17c5cb586f6gkqkwd0x1ge8t0400000000y0000000004wud x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:31 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	54982	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 13:36:31 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 13:36:31 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 13:36:31 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 366b13b4-c01e-0082-1a80-26af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T133631Z-16849878b786vsxz21496wc2qn00000009eg000000002bbf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 13:36:31 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Target ID:	0
Start time:	09:35:55
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	09:35:59
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=1996,i,13365789237839253957,2226731636364892514,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	09:36:02
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://books.zoho.com/api/v3/settings/templates/invoicelogo/2-9f5f6126fb9f5927bb890a052eb3e49c534d130e54c0d7eb3f0166cd0041c6789a3b840ec167bdeab503b1141cf436f4"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	09:37:15
Start date:	25/10/2024
Path:	C:\Windows\SysWOW64\mspaint.exe
Wow64 process (32bit):	true
Commandline:	mspaint.exe "C:\Users\user\Desktop\"
Imagebase:	0xb40000
File size:	743'424 bytes
MD5 hash:	986A191E95952C9E3FE6BE112FB92026
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: global traffic	DNS traffic detected: DNS query: books.zoho.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.0

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://books.zoho.com/api/v3/settings/templates/invoicelogo/2-9f5f6126fb9f5927bb890a052eb3e49c534d130e54c0d7eb3f0166cd0041c6789a3b840ec167bdeab503b1141cf436f4

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

C:\Users\user\Downloads\0ef71b6e-a980-4dd6-9f83-df83f6561ba1.tmp

C:\Users\user\Downloads\Invoicelogo_2023-06-20_Logo_Assek_ZohoBooks240px.png (copy)

C:\Users\user\Downloads\Invoicelogo_2023-06-20_Logo_Assek_ZohoBooks240px.png.crdownload

C:\Windows\debug\WIA\wiatrace.log

Chrome Cache Entry: 124

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

High Level Behavior Distribution

back

Behavior

System Behavior

Windows Analysis Report
https://books.zoho.com/api/v3/settings/templates/invoicelogo/2-9f5f6126fb9f5927bb890a052eb3e49c534d130e54c0d7eb3f0166cd0041c6789a3b840ec167bdeab503b1141cf436f4