Edit tour

Windows Analysis Report
https://re.e-sharedonedrivefile.com/skjashd

Overview

General Information

Sample URL:	https://re.e-sharedonedrivefile.com/skjashd
Analysis ID:	1540237
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1228 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4996 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=2000,i,776413188470899524,6089410946391969851,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6272 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://re.e-sharedonedrivefile.com/skjashd" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /report/v4?s=g%2ByfNLoCwfJzcLifv%2Bm%2BnLZdZkAMLVMBXrBJuzNgp%2B23kekPIUxJwCDgHLyYmownGSkaNHR4de3aPEYxNjiMlO3%2F5Q1FpvcJlqjR96FkP2UqdqMJ1X3M5vDVpf7Sz1RrDrO17ofC%2BRTWpa7SmLk%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 432Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 23 Oct 2024 13:37:42 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g%2ByfNLoCwfJzcLifv%2Bm%2BnLZdZkAMLVMBXrBJuzNgp%2B23kekPIUxJwCDgHLyYmownGSkaNHR4de3aPEYxNjiMlO3%2F5Q1FpvcJlqjR96FkP2UqdqMJ1X3M5vDVpf7Sz1RrDrO17ofC%2BRTWpa7SmLk%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d721f8ecf002cb2-DFWalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1519&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2864&recv_bytes=1282&delivery_rate=1873221&cwnd=251&unsent_bytes=0&cid=e68934b535141665&ts=528&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 23 Oct 2024 13:37:43 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VHYzKwCdwE4MDVAKlc7iaBiKOb8moXGnZgTs4Uu%2Bx8n7DV6ysVuF77jM1v4LqEca2N7i5XHIvP4FJfcYCs4%2FUpuspUvbBZqUSKkEt5baaJIEgjZTzAoGaMErlNcU2QehndVS6yaRuOFBKx%2FmKqM%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d721f99ac57e5ee-DFWalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1196&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2862&recv_bytes=1222&delivery_rate=2302066&cwnd=240&unsent_bytes=0&cid=917a526aeba5bb4e&ts=148&x=0"

Source: manifest.json.0.dr

String found in binary or memory: https://clients2.google.com/service/update2/crx

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54413 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54459 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 54436 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54494 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54460 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 54493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 54482 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54412 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 54471 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 54437 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 54423 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54503 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54495 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 54472 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 54484 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54449 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 54483 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54411 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 54438 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54504 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 54450 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 54462 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54485 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54410 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54421 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54474 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 54451 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 54409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 54452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54408 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54463 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54487 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54501 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54441 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54497 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54430 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54486 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54475 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54419
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54418
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54417
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54412
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54411
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54410
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54416
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54415
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54414
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54413
Source: unknown	Network traffic detected: HTTP traffic on port 54488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54453 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54429
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54428
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54423
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54422
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54421
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54420
Source: unknown	Network traffic detected: HTTP traffic on port 54407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54427
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54426
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54425
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54424
Source: unknown	Network traffic detected: HTTP traffic on port 54442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54430
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54418 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54477 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54439
Source: unknown	Network traffic detected: HTTP traffic on port 54406 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54431 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54434
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54433
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54432
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54431
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54438
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54437
Source: unknown	Network traffic detected: HTTP traffic on port 54429 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54436
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54435
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54441
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54440
Source: unknown	Network traffic detected: HTTP traffic on port 54499 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54445
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54444
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54442
Source: unknown	Network traffic detected: HTTP traffic on port 54443 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54449
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54448
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54447
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54446
Source: unknown	Network traffic detected: HTTP traffic on port 54500 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54452
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54451
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54450
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54454 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54417 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54455 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54508
Source: unknown	Network traffic detected: HTTP traffic on port 54428 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54507
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54506
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54505
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54509
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54500
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54504
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54503
Source: unknown	Network traffic detected: HTTP traffic on port 54466 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54502
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54501
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54490 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54509 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54467 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54409
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54408
Source: unknown	Network traffic detected: HTTP traffic on port 54405 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54407
Source: unknown	Network traffic detected: HTTP traffic on port 54478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54406
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54405
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54404
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54403
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54402
Source: unknown	Network traffic detected: HTTP traffic on port 54416 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54489 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54433 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54427 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54507 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54499
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54498
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54497
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54491 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54480 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54445 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54415 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54457 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54426 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54508 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54468 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54479 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 54446 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54456
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54455
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54454
Source: unknown	Network traffic detected: HTTP traffic on port 54469 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54453
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54459
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54458
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54457
Source: unknown	Network traffic detected: HTTP traffic on port 54481 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54463
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54462
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54461
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54460
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 54403 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54506 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54467
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54466
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54464
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54469
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54468
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54470
Source: unknown	Network traffic detected: HTTP traffic on port 54414 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54474
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54473
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54472
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54471
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 54435 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54402 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54478
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54477
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54476
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54475
Source: unknown	Network traffic detected: HTTP traffic on port 54425 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54479
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54481
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54480
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54485
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54484
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54483
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54482
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54470 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54489
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54488
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54487
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54486
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54447 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54492
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54491
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54490
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54496
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54495
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54494
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54493
Source: unknown	Network traffic detected: HTTP traffic on port 54458 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54492 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.4:49756 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1228_971661787	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1228_971661787\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1228_971661787\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1228_971661787\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1228_971661787\manifest.fingerprint	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\chrome_BITS_1228_1687088110

Jump to behavior

Source: classification engine

Classification label: mal48.win@22/7@6/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=2000,i,776413188470899524,6089410946391969851,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://re.e-sharedonedrivefile.com/skjashd"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=2000,i,776413188470899524,6089410946391969851,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://re.e-sharedonedrivefile.com/skjashd	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Name	IP	Active	Malicious	Reputation
re.e-sharedonedrivefile.com	172.67.149.171	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
s-part-0044.t-0009.fb-t-msedge.net	13.107.253.72	true	false	unknown
www.google.com	216.58.206.68	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://re.e-sharedonedrivefile.com/favicon.ico	false	unknown
https://re.e-sharedonedrivefile.com/33lrrtevpnn26pizbvfv99vlfq7v4z2ur7	false	unknown
https://a.nel.cloudflare.com/report/v4?s=g%2ByfNLoCwfJzcLifv%2Bm%2BnLZdZkAMLVMBXrBJuzNgp%2B23kekPIUxJwCDgHLyYmownGSkaNHR4de3aPEYxNjiMlO3%2F5Q1FpvcJlqjR96FkP2UqdqMJ1X3M5vDVpf7Sz1RrDrO17ofC%2BRTWpa7SmLk%3D	false	unknown
https://re.e-sharedonedrivefile.com/skjashd	true	unknown
https://a.nel.cloudflare.com/report/v4?s=VHYzKwCdwE4MDVAKlc7iaBiKOb8moXGnZgTs4Uu%2Bx8n7DV6ysVuF77jM1v4LqEca2N7i5XHIvP4FJfcYCs4%2FUpuspUvbBZqUSKkEt5baaJIEgjZTzAoGaMErlNcU2QehndVS6yaRuOFBKx%2FmKqM%3D	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.67.149.171	re.e-sharedonedrivefile.com	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1540237
Start date and time:	2024-10-23 15:36:33 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 25s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://re.e-sharedonedrivefile.com/skjashd
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@22/7@6/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.67, 142.250.185.142, 74.125.206.84, 34.104.35.123, 199.232.214.172, 192.229.221.95, 142.250.186.163
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://re.e-sharedonedrivefile.com/skjashd

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1311
Entropy (8bit):	5.980927481700407
Encrypted:	false
SSDEEP:	24:pZRj/flTDhVmddLh7aoXE6WGyna/V7TWCXoX4Af1kQoQcAe:p/hlAdX7akVWGynaoCXkz1kQoQU
MD5:	F584E95EC547F8E9892079DCCB8C0300
SHA1:	9B0819F3F03267093B7C975F840BDA5FB1A343A9
SHA-256:	229276E289709A403DAEC9B03DFB1477D3AB6801094B79A8983474223C4CF963
SHA-512:	265E5406C965032E3477CB250AE8878843CCB62412B23D7454AC520B6DBDD367F45F0810DA708A4D29E3B0D219FA1B40B8DA0638F1E0E6B831836FAD21085488
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"eyJjb250ZW50X2hhc2hlcyI6W3siYmxvY2tfc2l6ZSI6NDA5NiwiZGlnZXN0Ijoic2hhMjU2IiwiZmlsZXMiOlt7InBhdGgiOiJtYW5pZmVzdC5qc29uIiwicm9vdF9oYXNoIjoidmhzdFMxaUFXRWxoeEc3STdTZHJidVEtcFpYYVZuSUNhT0JiMDlYSlUwQSJ9XSwiZm9ybWF0IjoidHJlZWhhc2giLCJoYXNoX2Jsb2NrX3NpemUiOjQwOTZ9XSwiaXRlbV9pZCI6Imxsa2dqZmZjZHBmZm1oaWFrbWZjZGNibG9oY2NwZm1vIiwiaXRlbV92ZXJzaW9uIjoiMS4wLjAuMTciLCJwcm90b2NvbF92ZXJzaW9uIjoxfQ","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"FmyKp6BeTnEz4O2ZeErhtHi561C6YqZWvYffP8tIXaVpUdqn2H7wE99Czl03-8QinTEJ_PTuudrhNTrUM4e-SOewVi5E4wDijHU1eMgE9A_A2nGBu6vfvKrNIYTp4Ut175fTe4AhWMpbYyrsECEuQNf5AxYpnXg8F3WOqJj5TPWtuPMn2xmiJUkEnRs9okD6guLeMx4yhkdXOme2LnLFAfe6Ulfxew_XHXvZ1Y7MohLS_R1QPl1EIlf2HuJTZllyvNPehR4nJGG8FC--7fI9xw6EAsozvwpTUTKEktRcI1FXWRWlIAmtuK-g3HH_d30putZeNp1bDNUctkDolQKBVQ"},{"header":{"kid":"webstore"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"D-sVn2blf9c5r4WX327IV9uEthjKF5c7FIagu

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1228_971661787\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.850937210714388
Encrypted:	false
SSDEEP:	3:SXHWANEr7uwTsBtU:SXWANS5sM
MD5:	DD4911D1000B0779A63B51B9DC72BA6F
SHA1:	0853C546284867A3BCDB59E506DD2F0B596145A1
SHA-256:	57D878544717AB76EEFB05BFA9409AFA38ED565813B81A7EED8FDDD929015E40
SHA-512:	1D763C57CAA7DCD84547E90466CD8B5A85158052D344A3A9FFBC55BEE7F3AFC535EE658F09055D4C68B7BEBDC2B3C590F62B41274F25E3DA8A0F9009A0DD35AB
Malicious:	false
Reputation:	low
Preview:	1.2638e3c2d1fa1d417bfdc31dd21bc938f106d3b436a6488b41b014ca9e2b7541

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1228_971661787\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	300
Entropy (8bit):	4.725809151196814
Encrypted:	false
SSDEEP:	6:zeXC6WQpVyTJCAEIfd26V2dabIA6V2/C6wrhKXk7Vm01LwyAGI/zqSkhDY:0eTJCAEQL4ahQ2DgK0711LqGik5Y
MD5:	01F3DE10093B3B262105724E85817FA6
SHA1:	97DEE66ECE41B53A27CBD4579F44C204E35D19D6
SHA-256:	BE1B2D4B5880584961C46EC8ED276B6EE43EA595DA56720268E05BD3D5C95340
SHA-512:	9646B13E23C4214BCC45715FBC60EB9AFB29F934D5D33B3471EE89A6F399A68D83B5BDFF14748F73CE6A7C2C9FDCE782A4CE849F855A900514636B529E9B400F
Malicious:	false
Reputation:	low
Preview:	{. "description" : "Origin Trials public key updates and disabled features list",. "manifest_version" : 3,. "minimum_chrome_version" : "88",. "name" : "Origin Trials Updates",. "origin-trials" : null,. "update_url" : "https://clients2.google.com/service/update2/crx",. "version" : "1.0.0.17".}

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	128
Entropy (8bit):	4.625426344841861
Encrypted:	false
SSDEEP:	3:qVZqcMC0XMvGbJScFcBVWRME9wXF8sBWRlhWABCts9KHj:qz4i2SJVWRFKXF8sgRllBC8KD
MD5:	E25C72E37472E8050DB11DB4A40EFBBC
SHA1:	9CB9E36A7A3CB72CDC9FDE68075C045A04B319BE
SHA-256:	9C54BF4D0EC938AD2EF5F76A227F3F017F161B3AD328991C58DD0857B713BBEA
SHA-512:	A487B2C940457FEA8B4E3EB133FE5549EB8ADCCDEBCCB2BF5B0911898AC8C0F7D44D562AD0A991255D28E9FDF27052B9583700669606D756A9DF28CAEEB4A6E9
Malicious:	false
Reputation:	low
URL:	https://re.e-sharedonedrivefile.com/favicon.ico
Preview:	<html><body><h1>URL Expired</h1><p>The file URL you requested has expired or does not exist. Please try again.</p></body></html>

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	128
Entropy (8bit):	4.625426344841861
Encrypted:	false
SSDEEP:	3:qVZqcMC0XMvGbJScFcBVWRME9wXF8sBWRlhWABCts9KHj:qz4i2SJVWRFKXF8sgRllBC8KD
MD5:	E25C72E37472E8050DB11DB4A40EFBBC
SHA1:	9CB9E36A7A3CB72CDC9FDE68075C045A04B319BE
SHA-256:	9C54BF4D0EC938AD2EF5F76A227F3F017F161B3AD328991C58DD0857B713BBEA
SHA-512:	A487B2C940457FEA8B4E3EB133FE5549EB8ADCCDEBCCB2BF5B0911898AC8C0F7D44D562AD0A991255D28E9FDF27052B9583700669606D756A9DF28CAEEB4A6E9
Malicious:	false
Reputation:	low
URL:	https://re.e-sharedonedrivefile.com/33lrrtevpnn26pizbvfv99vlfq7v4z2ur7
Preview:	<html><body><h1>URL Expired</h1><p>The file URL you requested has expired or does not exist. Please try again.</p></body></html>

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 23, 2024 15:37:31.079499006 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 23, 2024 15:37:40.524096012 CEST	49735	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:40.524133921 CEST	443	49735	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:40.524211884 CEST	49735	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:40.524321079 CEST	49736	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:40.524416924 CEST	443	49736	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:40.524574041 CEST	49735	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:40.524588108 CEST	443	49735	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:40.524610043 CEST	49736	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:40.524843931 CEST	49736	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:40.524880886 CEST	443	49736	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:41.141433001 CEST	443	49735	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:41.141799927 CEST	49735	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:41.141819954 CEST	443	49735	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:41.143285036 CEST	443	49735	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:41.143362999 CEST	49735	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:41.148500919 CEST	49735	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:41.148566961 CEST	49735	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:41.148646116 CEST	443	49735	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:41.148649931 CEST	49735	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:41.148729086 CEST	49735	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:41.149033070 CEST	49739	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:41.149085999 CEST	443	49739	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:41.149208069 CEST	49739	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:41.149393082 CEST	49739	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:41.149408102 CEST	443	49739	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:41.149534941 CEST	443	49736	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:41.149890900 CEST	49736	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:41.149938107 CEST	443	49736	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:41.153145075 CEST	443	49736	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:41.153263092 CEST	49736	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:41.153624058 CEST	49736	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:41.153693914 CEST	49736	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:41.153700113 CEST	443	49736	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:41.153749943 CEST	49736	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:41.153805017 CEST	49736	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:41.154139996 CEST	49740	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:41.154222965 CEST	443	49740	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:41.154314995 CEST	49740	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:41.154510975 CEST	49740	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:41.154548883 CEST	443	49740	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:41.996408939 CEST	443	49740	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:41.996761084 CEST	49740	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:41.996802092 CEST	443	49740	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:41.997993946 CEST	443	49739	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:41.998056889 CEST	443	49740	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:41.998132944 CEST	49740	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:41.998384953 CEST	49739	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:41.998409033 CEST	443	49739	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:41.999450922 CEST	49740	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:41.999525070 CEST	443	49740	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:41.999659061 CEST	49740	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:41.999675989 CEST	443	49740	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:42.000075102 CEST	443	49739	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:42.000150919 CEST	49739	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:42.001434088 CEST	49739	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:42.001544952 CEST	443	49739	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:42.049220085 CEST	49740	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:42.049287081 CEST	49739	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:42.049333096 CEST	443	49739	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:42.096767902 CEST	49739	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:42.138552904 CEST	443	49740	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:42.138725996 CEST	443	49740	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:42.138782978 CEST	49740	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:42.140168905 CEST	49740	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:42.140187979 CEST	443	49740	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:42.140198946 CEST	49740	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:42.140243053 CEST	49740	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:42.143781900 CEST	49739	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:42.191354036 CEST	443	49739	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:42.279690981 CEST	443	49739	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:42.279947042 CEST	443	49739	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:42.280005932 CEST	49739	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:42.286514997 CEST	49739	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:42.286560059 CEST	443	49739	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:42.386792898 CEST	49741	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:37:42.386842966 CEST	443	49741	35.190.80.1	192.168.2.4
Oct 23, 2024 15:37:42.386913061 CEST	49741	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:37:42.603343964 CEST	49741	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:37:42.603379011 CEST	443	49741	35.190.80.1	192.168.2.4
Oct 23, 2024 15:37:42.609632969 CEST	49742	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:42.609673977 CEST	443	49742	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:42.609759092 CEST	49742	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:42.610255957 CEST	49742	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:42.610269070 CEST	443	49742	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:42.683137894 CEST	49743	443	192.168.2.4	216.58.206.68
Oct 23, 2024 15:37:42.683253050 CEST	443	49743	216.58.206.68	192.168.2.4
Oct 23, 2024 15:37:42.683356047 CEST	49743	443	192.168.2.4	216.58.206.68
Oct 23, 2024 15:37:42.683537006 CEST	49743	443	192.168.2.4	216.58.206.68
Oct 23, 2024 15:37:42.683572054 CEST	443	49743	216.58.206.68	192.168.2.4
Oct 23, 2024 15:37:43.186665058 CEST	49745	443	192.168.2.4	184.28.90.27
Oct 23, 2024 15:37:43.186702013 CEST	443	49745	184.28.90.27	192.168.2.4
Oct 23, 2024 15:37:43.186815977 CEST	49745	443	192.168.2.4	184.28.90.27
Oct 23, 2024 15:37:43.189838886 CEST	49745	443	192.168.2.4	184.28.90.27
Oct 23, 2024 15:37:43.189852953 CEST	443	49745	184.28.90.27	192.168.2.4
Oct 23, 2024 15:37:43.241046906 CEST	443	49742	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:43.241436958 CEST	49742	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:43.241452932 CEST	443	49742	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:43.243043900 CEST	443	49742	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:43.243118048 CEST	49742	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:43.243474007 CEST	49742	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:43.243484974 CEST	49742	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:43.243531942 CEST	443	49742	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:43.243691921 CEST	443	49742	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:43.243711948 CEST	49742	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:43.243720055 CEST	443	49742	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:43.243729115 CEST	49742	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:43.243746042 CEST	49742	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:43.243767977 CEST	49742	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:43.244018078 CEST	49746	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:43.244091988 CEST	443	49746	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:43.244214058 CEST	49746	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:43.244481087 CEST	49746	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:43.244512081 CEST	443	49746	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:43.253118992 CEST	443	49741	35.190.80.1	192.168.2.4
Oct 23, 2024 15:37:43.253321886 CEST	49741	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:37:43.253350973 CEST	443	49741	35.190.80.1	192.168.2.4
Oct 23, 2024 15:37:43.254816055 CEST	443	49741	35.190.80.1	192.168.2.4
Oct 23, 2024 15:37:43.254884958 CEST	49741	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:37:43.256285906 CEST	49741	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:37:43.256376028 CEST	443	49741	35.190.80.1	192.168.2.4
Oct 23, 2024 15:37:43.256516933 CEST	49741	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:37:43.256525040 CEST	443	49741	35.190.80.1	192.168.2.4
Oct 23, 2024 15:37:43.296948910 CEST	49741	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:37:43.400103092 CEST	443	49741	35.190.80.1	192.168.2.4
Oct 23, 2024 15:37:43.400435925 CEST	49741	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:37:43.400538921 CEST	443	49741	35.190.80.1	192.168.2.4
Oct 23, 2024 15:37:43.400631905 CEST	49741	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:37:43.401369095 CEST	49747	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:37:43.401448965 CEST	443	49747	35.190.80.1	192.168.2.4
Oct 23, 2024 15:37:43.401529074 CEST	49747	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:37:43.401756048 CEST	49747	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:37:43.401789904 CEST	443	49747	35.190.80.1	192.168.2.4
Oct 23, 2024 15:37:43.551059961 CEST	443	49743	216.58.206.68	192.168.2.4
Oct 23, 2024 15:37:43.551390886 CEST	49743	443	192.168.2.4	216.58.206.68
Oct 23, 2024 15:37:43.551451921 CEST	443	49743	216.58.206.68	192.168.2.4
Oct 23, 2024 15:37:43.553088903 CEST	443	49743	216.58.206.68	192.168.2.4
Oct 23, 2024 15:37:43.553177118 CEST	49743	443	192.168.2.4	216.58.206.68
Oct 23, 2024 15:37:43.554281950 CEST	49743	443	192.168.2.4	216.58.206.68
Oct 23, 2024 15:37:43.554364920 CEST	443	49743	216.58.206.68	192.168.2.4
Oct 23, 2024 15:37:43.594326019 CEST	49743	443	192.168.2.4	216.58.206.68
Oct 23, 2024 15:37:43.594371080 CEST	443	49743	216.58.206.68	192.168.2.4
Oct 23, 2024 15:37:43.642409086 CEST	49743	443	192.168.2.4	216.58.206.68
Oct 23, 2024 15:37:43.875796080 CEST	443	49746	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:43.876168013 CEST	49746	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:43.876216888 CEST	443	49746	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:43.876568079 CEST	443	49746	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:43.877058983 CEST	49746	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:43.877134085 CEST	443	49746	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:43.877227068 CEST	49746	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:43.919354916 CEST	443	49746	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:44.011883974 CEST	443	49747	35.190.80.1	192.168.2.4
Oct 23, 2024 15:37:44.012232065 CEST	49747	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:37:44.012264967 CEST	443	49747	35.190.80.1	192.168.2.4
Oct 23, 2024 15:37:44.013739109 CEST	443	49747	35.190.80.1	192.168.2.4
Oct 23, 2024 15:37:44.013819933 CEST	49747	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:37:44.015031099 CEST	443	49746	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:44.015260935 CEST	49747	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:37:44.015341997 CEST	443	49746	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:44.015378952 CEST	443	49747	35.190.80.1	192.168.2.4
Oct 23, 2024 15:37:44.015439034 CEST	49746	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:44.015985966 CEST	49747	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:37:44.016005993 CEST	443	49747	35.190.80.1	192.168.2.4
Oct 23, 2024 15:37:44.019853115 CEST	49746	443	192.168.2.4	172.67.149.171
Oct 23, 2024 15:37:44.019902945 CEST	443	49746	172.67.149.171	192.168.2.4
Oct 23, 2024 15:37:44.039680958 CEST	443	49745	184.28.90.27	192.168.2.4
Oct 23, 2024 15:37:44.039753914 CEST	49745	443	192.168.2.4	184.28.90.27
Oct 23, 2024 15:37:44.047095060 CEST	49745	443	192.168.2.4	184.28.90.27
Oct 23, 2024 15:37:44.047108889 CEST	443	49745	184.28.90.27	192.168.2.4
Oct 23, 2024 15:37:44.047645092 CEST	443	49745	184.28.90.27	192.168.2.4
Oct 23, 2024 15:37:44.062967062 CEST	49747	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:37:44.094213009 CEST	49745	443	192.168.2.4	184.28.90.27
Oct 23, 2024 15:37:44.106159925 CEST	49745	443	192.168.2.4	184.28.90.27
Oct 23, 2024 15:37:44.114039898 CEST	49748	443	192.168.2.4	20.12.23.50
Oct 23, 2024 15:37:44.114101887 CEST	443	49748	20.12.23.50	192.168.2.4
Oct 23, 2024 15:37:44.114289045 CEST	49748	443	192.168.2.4	20.12.23.50
Oct 23, 2024 15:37:44.116645098 CEST	49748	443	192.168.2.4	20.12.23.50
Oct 23, 2024 15:37:44.116666079 CEST	443	49748	20.12.23.50	192.168.2.4
Oct 23, 2024 15:37:44.151344061 CEST	443	49745	184.28.90.27	192.168.2.4
Oct 23, 2024 15:37:44.159216881 CEST	443	49747	35.190.80.1	192.168.2.4
Oct 23, 2024 15:37:44.159578085 CEST	49747	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:37:44.159717083 CEST	443	49747	35.190.80.1	192.168.2.4
Oct 23, 2024 15:37:44.159789085 CEST	49747	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:37:44.348562002 CEST	443	49745	184.28.90.27	192.168.2.4
Oct 23, 2024 15:37:44.348654985 CEST	443	49745	184.28.90.27	192.168.2.4
Oct 23, 2024 15:37:44.348779917 CEST	49745	443	192.168.2.4	184.28.90.27
Oct 23, 2024 15:37:44.348843098 CEST	49745	443	192.168.2.4	184.28.90.27
Oct 23, 2024 15:37:44.348869085 CEST	443	49745	184.28.90.27	192.168.2.4
Oct 23, 2024 15:37:44.348881960 CEST	49745	443	192.168.2.4	184.28.90.27
Oct 23, 2024 15:37:44.348890066 CEST	443	49745	184.28.90.27	192.168.2.4
Oct 23, 2024 15:37:44.380075932 CEST	49749	443	192.168.2.4	184.28.90.27
Oct 23, 2024 15:37:44.380162954 CEST	443	49749	184.28.90.27	192.168.2.4
Oct 23, 2024 15:37:44.380254030 CEST	49749	443	192.168.2.4	184.28.90.27
Oct 23, 2024 15:37:44.380565882 CEST	49749	443	192.168.2.4	184.28.90.27
Oct 23, 2024 15:37:44.380598068 CEST	443	49749	184.28.90.27	192.168.2.4
Oct 23, 2024 15:37:44.973762989 CEST	443	49748	20.12.23.50	192.168.2.4
Oct 23, 2024 15:37:44.973880053 CEST	49748	443	192.168.2.4	20.12.23.50
Oct 23, 2024 15:37:45.000873089 CEST	49748	443	192.168.2.4	20.12.23.50
Oct 23, 2024 15:37:45.000926971 CEST	443	49748	20.12.23.50	192.168.2.4
Oct 23, 2024 15:37:45.001281023 CEST	443	49748	20.12.23.50	192.168.2.4
Oct 23, 2024 15:37:45.048190117 CEST	49748	443	192.168.2.4	20.12.23.50
Oct 23, 2024 15:37:45.231372118 CEST	443	49749	184.28.90.27	192.168.2.4
Oct 23, 2024 15:37:45.231468916 CEST	49749	443	192.168.2.4	184.28.90.27
Oct 23, 2024 15:37:45.232664108 CEST	49749	443	192.168.2.4	184.28.90.27
Oct 23, 2024 15:37:45.232692957 CEST	443	49749	184.28.90.27	192.168.2.4
Oct 23, 2024 15:37:45.233207941 CEST	443	49749	184.28.90.27	192.168.2.4
Oct 23, 2024 15:37:45.234185934 CEST	49749	443	192.168.2.4	184.28.90.27
Oct 23, 2024 15:37:45.279340029 CEST	443	49749	184.28.90.27	192.168.2.4
Oct 23, 2024 15:37:45.478593111 CEST	443	49749	184.28.90.27	192.168.2.4
Oct 23, 2024 15:37:45.478745937 CEST	443	49749	184.28.90.27	192.168.2.4
Oct 23, 2024 15:37:45.478837013 CEST	49749	443	192.168.2.4	184.28.90.27
Oct 23, 2024 15:37:45.479501963 CEST	49749	443	192.168.2.4	184.28.90.27
Oct 23, 2024 15:37:45.479501963 CEST	49749	443	192.168.2.4	184.28.90.27
Oct 23, 2024 15:37:45.479537010 CEST	443	49749	184.28.90.27	192.168.2.4
Oct 23, 2024 15:37:45.479552984 CEST	443	49749	184.28.90.27	192.168.2.4
Oct 23, 2024 15:37:45.687098026 CEST	49748	443	192.168.2.4	20.12.23.50
Oct 23, 2024 15:37:45.727334023 CEST	443	49748	20.12.23.50	192.168.2.4
Oct 23, 2024 15:37:45.969963074 CEST	443	49748	20.12.23.50	192.168.2.4
Oct 23, 2024 15:37:45.969988108 CEST	443	49748	20.12.23.50	192.168.2.4
Oct 23, 2024 15:37:45.969995975 CEST	443	49748	20.12.23.50	192.168.2.4
Oct 23, 2024 15:37:45.970006943 CEST	443	49748	20.12.23.50	192.168.2.4
Oct 23, 2024 15:37:45.970035076 CEST	443	49748	20.12.23.50	192.168.2.4
Oct 23, 2024 15:37:45.970087051 CEST	49748	443	192.168.2.4	20.12.23.50
Oct 23, 2024 15:37:45.970128059 CEST	443	49748	20.12.23.50	192.168.2.4
Oct 23, 2024 15:37:45.970149040 CEST	49748	443	192.168.2.4	20.12.23.50
Oct 23, 2024 15:37:45.970177889 CEST	49748	443	192.168.2.4	20.12.23.50
Oct 23, 2024 15:37:45.970382929 CEST	443	49748	20.12.23.50	192.168.2.4
Oct 23, 2024 15:37:45.970446110 CEST	49748	443	192.168.2.4	20.12.23.50
Oct 23, 2024 15:37:45.970455885 CEST	443	49748	20.12.23.50	192.168.2.4
Oct 23, 2024 15:37:45.970951080 CEST	443	49748	20.12.23.50	192.168.2.4
Oct 23, 2024 15:37:45.971033096 CEST	49748	443	192.168.2.4	20.12.23.50
Oct 23, 2024 15:37:46.314140081 CEST	49723	80	192.168.2.4	199.232.210.172
Oct 23, 2024 15:37:46.320050001 CEST	80	49723	199.232.210.172	192.168.2.4
Oct 23, 2024 15:37:46.320132017 CEST	49723	80	192.168.2.4	199.232.210.172
Oct 23, 2024 15:37:46.610192060 CEST	49748	443	192.168.2.4	20.12.23.50
Oct 23, 2024 15:37:46.610218048 CEST	443	49748	20.12.23.50	192.168.2.4
Oct 23, 2024 15:37:53.554826021 CEST	443	49743	216.58.206.68	192.168.2.4
Oct 23, 2024 15:37:53.554929018 CEST	443	49743	216.58.206.68	192.168.2.4
Oct 23, 2024 15:37:53.555175066 CEST	49743	443	192.168.2.4	216.58.206.68
Oct 23, 2024 15:37:55.096596003 CEST	49743	443	192.168.2.4	216.58.206.68
Oct 23, 2024 15:37:55.096700907 CEST	443	49743	216.58.206.68	192.168.2.4
Oct 23, 2024 15:38:23.019804955 CEST	49755	443	192.168.2.4	20.12.23.50
Oct 23, 2024 15:38:23.019856930 CEST	443	49755	20.12.23.50	192.168.2.4
Oct 23, 2024 15:38:23.019998074 CEST	49755	443	192.168.2.4	20.12.23.50
Oct 23, 2024 15:38:23.020519018 CEST	49755	443	192.168.2.4	20.12.23.50
Oct 23, 2024 15:38:23.020529985 CEST	443	49755	20.12.23.50	192.168.2.4
Oct 23, 2024 15:38:23.875961065 CEST	443	49755	20.12.23.50	192.168.2.4
Oct 23, 2024 15:38:23.876034975 CEST	49755	443	192.168.2.4	20.12.23.50
Oct 23, 2024 15:38:23.882565975 CEST	49755	443	192.168.2.4	20.12.23.50
Oct 23, 2024 15:38:23.882577896 CEST	443	49755	20.12.23.50	192.168.2.4
Oct 23, 2024 15:38:23.882790089 CEST	443	49755	20.12.23.50	192.168.2.4
Oct 23, 2024 15:38:23.898305893 CEST	49755	443	192.168.2.4	20.12.23.50
Oct 23, 2024 15:38:23.939330101 CEST	443	49755	20.12.23.50	192.168.2.4
Oct 23, 2024 15:38:24.182805061 CEST	443	49755	20.12.23.50	192.168.2.4
Oct 23, 2024 15:38:24.182892084 CEST	443	49755	20.12.23.50	192.168.2.4
Oct 23, 2024 15:38:24.182941914 CEST	443	49755	20.12.23.50	192.168.2.4
Oct 23, 2024 15:38:24.182976007 CEST	49755	443	192.168.2.4	20.12.23.50
Oct 23, 2024 15:38:24.182993889 CEST	443	49755	20.12.23.50	192.168.2.4
Oct 23, 2024 15:38:24.183021069 CEST	49755	443	192.168.2.4	20.12.23.50
Oct 23, 2024 15:38:24.183037996 CEST	49755	443	192.168.2.4	20.12.23.50
Oct 23, 2024 15:38:24.184168100 CEST	443	49755	20.12.23.50	192.168.2.4
Oct 23, 2024 15:38:24.184241056 CEST	49755	443	192.168.2.4	20.12.23.50
Oct 23, 2024 15:38:24.184246063 CEST	443	49755	20.12.23.50	192.168.2.4
Oct 23, 2024 15:38:24.184294939 CEST	443	49755	20.12.23.50	192.168.2.4
Oct 23, 2024 15:38:24.184314013 CEST	49755	443	192.168.2.4	20.12.23.50
Oct 23, 2024 15:38:24.184421062 CEST	443	49755	20.12.23.50	192.168.2.4
Oct 23, 2024 15:38:24.184588909 CEST	49755	443	192.168.2.4	20.12.23.50
Oct 23, 2024 15:38:24.212043047 CEST	49755	443	192.168.2.4	20.12.23.50
Oct 23, 2024 15:38:24.212058067 CEST	443	49755	20.12.23.50	192.168.2.4
Oct 23, 2024 15:38:24.673789978 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:24.673830032 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:24.673898935 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:24.674344063 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:24.674357891 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:25.458782911 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:25.458981991 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:25.461699963 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:25.461709976 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:25.462048054 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:25.471329927 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:25.519334078 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:25.726063967 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:25.726098061 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:25.726161957 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:25.726376057 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:25.726377010 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:25.726396084 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:25.726450920 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:25.728137016 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:25.728171110 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:25.728277922 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:25.728277922 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:25.728286028 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:25.728431940 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.049073935 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.049092054 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.049144983 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.049195051 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.049210072 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.049308062 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.049309969 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.049309969 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.049328089 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.049356937 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.049396992 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.049396992 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.049407005 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.049453974 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.049463987 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.049482107 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.049504042 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.049525023 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.049623013 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.049628019 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.049983978 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.054893970 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.054919004 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.055052996 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.055059910 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.055162907 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.056190968 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.056214094 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.056338072 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.056339025 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.056345940 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.056550026 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.057794094 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.057815075 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.057935953 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.057935953 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.057943106 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.058186054 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.059591055 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.059621096 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.059725046 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.059741974 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.060024023 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.062069893 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.062092066 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.062194109 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.062194109 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.062201023 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.062319994 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.083389044 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.083421946 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.083488941 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.083503008 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.083524942 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.083560944 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.084031105 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.084059000 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.084182978 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.084182978 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.084191084 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.084317923 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.084783077 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.084815025 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.084871054 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.084896088 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.084903002 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.084966898 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.084995985 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.085091114 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.085443020 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.085443974 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.085459948 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.085468054 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.182951927 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.183001041 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.183065891 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.183260918 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.183286905 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.183301926 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.183320999 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.183604956 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.183604956 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.183645964 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.184597015 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.184609890 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.184843063 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.185269117 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.185282946 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.186409950 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.186496019 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.186780930 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.186933041 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.186954975 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.187184095 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.187268972 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.187521935 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.187628031 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.187654018 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.934746027 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.935331106 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.935343981 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.935955048 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.935961008 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.936393023 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.936681032 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.936706066 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.937092066 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.937097073 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.943718910 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.944255114 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.944269896 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.945492029 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.945512056 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.949832916 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.950164080 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.950223923 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.950593948 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.950608969 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.950947046 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.951530933 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.951591015 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:26.952228069 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:26.952243090 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.072993040 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.073015928 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.073070049 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.073090076 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.073121071 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.073364973 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.073385954 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.073398113 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.073404074 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.076528072 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.076622009 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.076716900 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.076909065 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.076931000 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.078028917 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.078147888 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.078226089 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.078226089 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.078259945 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.078273058 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.080233097 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.080271959 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.080341101 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.080482960 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.080497026 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.080576897 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.080637932 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.080689907 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.080710888 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.080780983 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.080780983 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.080822945 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.080836058 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.080848932 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.080848932 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.080854893 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.080859900 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.082727909 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.082818985 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.082892895 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.083018064 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.083041906 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.085216999 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.085274935 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.085342884 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.085377932 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.085387945 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.085408926 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.085473061 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.085504055 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.085513115 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.085522890 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.085526943 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.085561991 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.085670948 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.085850954 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.085850954 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.085880041 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.085905075 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.087313890 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.087399006 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.087456942 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.087480068 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.087482929 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.087600946 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.087631941 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.087636948 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.087759972 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.087785959 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.829977989 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.830575943 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.830622911 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.831120968 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.831129074 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.845674038 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.846045017 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.846111059 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.846391916 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.846405983 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.853247881 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.853715897 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.853791952 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.853996992 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.854011059 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.854249001 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.854502916 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.854517937 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.854816914 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.854829073 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.862844944 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.863147020 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.863209963 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.863471031 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.863488913 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.966816902 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.967212915 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.967266083 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.967319965 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.967346907 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.967369080 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.967375994 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.970623970 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.970666885 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.970936060 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.971120119 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.971131086 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.985538960 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.985600948 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.985672951 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.985917091 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.985954046 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.985986948 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.986004114 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.989068031 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.989119053 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.990670919 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.991041899 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.991058111 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.991461039 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.991606951 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.991677999 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.991827965 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.991849899 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.991864920 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.991873026 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.991878033 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.993130922 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.993206024 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.993331909 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.993339062 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.993359089 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.993364096 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.996143103 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.996186972 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.996294022 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.996434927 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.996448994 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.997662067 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.997683048 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:27.997766018 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.997909069 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:27.997922897 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.001857042 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.001925945 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.002022028 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.002244949 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.002257109 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.002270937 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.002276897 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.008886099 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.008913040 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.009058952 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.009383917 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.009392977 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.730793953 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.732141972 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.732175112 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.733587027 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.733592987 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.749257088 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.750173092 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.750226021 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.751710892 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.751734018 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.754240036 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.754643917 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.754666090 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.755323887 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.755330086 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.761255026 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.761610985 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.761626005 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.762187004 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.762193918 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.763442993 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.763866901 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.763891935 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.764503002 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.764508963 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.874630928 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.874836922 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.874914885 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.875189066 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.875226974 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.875376940 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.875394106 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.880153894 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.880183935 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.880270004 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.880618095 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.880630970 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.886063099 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.886296034 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.886701107 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.886814117 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.886814117 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.886850119 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.886873960 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.890045881 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.890083075 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.890607119 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.890774012 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.890825987 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.890863895 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.890897989 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.890914917 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.891273975 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.891292095 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.891309023 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.891323090 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.895647049 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.895667076 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.895844936 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.896023989 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.896034956 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.896830082 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.897090912 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.897133112 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.897171974 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.897177935 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.899986029 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.900003910 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.900073051 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.900449038 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.900456905 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.901990891 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.902518034 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.902575970 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.902661085 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.902673960 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.902707100 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.902720928 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.905993938 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.906013012 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:28.906060934 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.906291962 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:28.906305075 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.636138916 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.636769056 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.636792898 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.637461901 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.637465954 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.645265102 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.645867109 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.645874023 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.646636963 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.646641016 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.648575068 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.648976088 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.649055004 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.649457932 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.649473906 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.657875061 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.658509970 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.658545971 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.659277916 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.659290075 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.663409948 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.663819075 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.663841963 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.664524078 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.664530993 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.773447037 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.773612022 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.773837090 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.774111032 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.774111032 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.774127960 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.774136066 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.778696060 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.778752089 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.778922081 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.779364109 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.779395103 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.782834053 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.782948017 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.783098936 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.783267975 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.783277035 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.783309937 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.783315897 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.786039114 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.786091089 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.786298037 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.786501884 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.786514997 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.789881945 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.789944887 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.790059090 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.790231943 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.790252924 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.790278912 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.790283918 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.794178963 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.794209957 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.794224024 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.794276953 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.794301987 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.794347048 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.794502974 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.794507980 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.794522047 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.794542074 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.797743082 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.797759056 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.797930956 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.798254967 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.798264980 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.804080963 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.804136992 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.804244995 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.804389954 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.804416895 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.804439068 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.804445028 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.807058096 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.807074070 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:29.807239056 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.807337046 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:29.807343960 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.545105934 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.545634031 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.545701027 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.546061993 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.546083927 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.550031900 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.550393105 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.550430059 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.550765038 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.550777912 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.555305958 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.555624008 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.555650949 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.555944920 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.555952072 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.564743042 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.565082073 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.565134048 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.565406084 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.565418959 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.574109077 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.574453115 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.574466944 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.574722052 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.574726105 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.684716940 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.685103893 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.685220003 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.685267925 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.685288906 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.685303926 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.685308933 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.688185930 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.688276052 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.688528061 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.688716888 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.688754082 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.692117929 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.692349911 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.692421913 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.692503929 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.692503929 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.692549944 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.692584991 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.694737911 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.694773912 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.694875002 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.695059061 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.695071936 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.699487925 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.699652910 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.699780941 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.699810982 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.699824095 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.699834108 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.699839115 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.701811075 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.701895952 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.701970100 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.702092886 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.702121973 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.706707001 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.706845999 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.706926107 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.707051992 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.707082033 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.707108974 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.707122087 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.709047079 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.709131956 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.709209919 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.709311962 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.709333897 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.714137077 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.714190006 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.714255095 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.714368105 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.714389086 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.714436054 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.714442015 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.716237068 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.716264963 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:30.716336966 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.716545105 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:30.716578007 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.450803995 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.451689959 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.451786041 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.452735901 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.452752113 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.456578970 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.457269907 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.457349062 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.458097935 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.458112001 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.465765953 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.466428041 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.466449976 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.466466904 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.467498064 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.467511892 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.468163013 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.468223095 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.468835115 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.468848944 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.497773886 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.498204947 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.498229980 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.498605013 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.498615980 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.589798927 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.589965105 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.590023994 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.590260029 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.590295076 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.590332031 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.590347052 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.595645905 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.595716953 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.595788002 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.596393108 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.596421957 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.598196983 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.598244905 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.598295927 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.598541975 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.598582029 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.598614931 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.598628998 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.607055902 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.607212067 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.607268095 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.608108044 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.608242035 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.608292103 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.608437061 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.608459949 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.608469963 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.608479023 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.608913898 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.608913898 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.608938932 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.608961105 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.612879038 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.612963915 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.613030910 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.613287926 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.613321066 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.616396904 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.616487980 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.616574049 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.616944075 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.616969109 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.617036104 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.618041039 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.618083000 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.618659019 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.618683100 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.635972977 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.637619019 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.637670994 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.637768030 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.637768030 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.637787104 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.637815952 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.641463995 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.641547918 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:31.641625881 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.641863108 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:31.641900063 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:32.359803915 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:32.360522985 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:32.360586882 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:32.361080885 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:32.361095905 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:32.377506971 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:32.378264904 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:32.378330946 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:32.378767967 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:32.378782988 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:32.385222912 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:32.385687113 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:32.385720015 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:32.386023045 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:32.386033058 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:32.400441885 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:32.400928974 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:32.401015997 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:32.401205063 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:32.401220083 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:32.496442080 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:32.496526957 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:32.496701002 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:32.496825933 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:32.496874094 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:32.496903896 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:32.496920109 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:32.499805927 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:32.499901056 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:32.499990940 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:32.500171900 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:32.500190973 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:32.514406919 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:32.514624119 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:32.514837027 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:32.514837027 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:32.514837027 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:32.517086983 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:32.517179966 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:32.517258883 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:32.517373085 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:32.517395973 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:32.523483038 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:32.523663998 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:32.523739100 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:32.523792028 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:32.523792028 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:32.523838043 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:32.523874044 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:32.525897980 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:32.525948048 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:32.526081085 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:32.526242971 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:32.526267052 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:32.538453102 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:32.538635969 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:32.538722038 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:32.538768053 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:32.538768053 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:32.538790941 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:32.538805962 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:32.540751934 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:32.540776014 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:32.541023016 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:32.541178942 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:32.541191101 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:32.828562021 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:32.828636885 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:33.250294924 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:33.251018047 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:33.251082897 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:33.251451015 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:33.251465082 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:33.274708033 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:33.275172949 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:33.275250912 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:33.275593042 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:33.275607109 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:33.529016972 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:33.529078960 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:33.529155016 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:33.529427052 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:33.529476881 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:33.529509068 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:33.529525042 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:33.530438900 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:33.530962944 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:33.531032085 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:33.531348944 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:33.531363010 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:33.532696009 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:33.532761097 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:33.532835007 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:33.533001900 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:33.533020973 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:33.537277937 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:33.537648916 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:33.537671089 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:33.537926912 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:33.538005114 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:33.538014889 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:33.538183928 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:33.538199902 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:33.538466930 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:33.538477898 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:33.922238111 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:33.922344923 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:33.922408104 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:33.922741890 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:33.922741890 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:33.922782898 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:33.922804117 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:33.926085949 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:33.926176071 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:33.926265955 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:33.926436901 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:33.926475048 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.052248001 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.052438974 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.052514076 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.052627087 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.052678108 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.052716017 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.052732944 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.053662062 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.053932905 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.053987026 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.054029942 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.054029942 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.054052114 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.054075956 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.054164886 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.054371119 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.054497004 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.054617882 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.054617882 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.054662943 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.054692030 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.056503057 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.056548119 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.056627035 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.056829929 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.056847095 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.057183981 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.057238102 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.057322979 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.057447910 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.057466984 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.057828903 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.057874918 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.057959080 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.058078051 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.058096886 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.677553892 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.678159952 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.678234100 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.678586006 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.678597927 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.691247940 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.691807985 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.691896915 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.692064047 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.692079067 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.816725969 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.816931009 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.817018032 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.817075014 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.817097902 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.817114115 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.817121983 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.818558931 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.818945885 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.818979979 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.819370985 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.819380045 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.819750071 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.819833040 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.819911957 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.820034981 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.820053101 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.826395988 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.826761961 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.826793909 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.827119112 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.827130079 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.827728033 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.828022003 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.828042984 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.828345060 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.828353882 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.829296112 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.829432964 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.829544067 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.829679012 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.829698086 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.829711914 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.829720020 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.831887960 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.831928015 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.832082033 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.832211971 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.832228899 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.956475019 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.956741095 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.956950903 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.957041025 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.957041025 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.957087994 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.957118034 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.959778070 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.959877968 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.959954023 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.960087061 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.960108995 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.968564987 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.968658924 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.968724012 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.968869925 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.968869925 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.968897104 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.968909979 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.970330954 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.970392942 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.970443010 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.970638990 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.970664024 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.970679998 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.970689058 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.971304893 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.971395016 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.971484900 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.971626997 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.971656084 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.972620964 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.972645998 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:34.972716093 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.972841978 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:34.972855091 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.563787937 CEST	49724	80	192.168.2.4	199.232.210.172
Oct 23, 2024 15:38:35.569581985 CEST	80	49724	199.232.210.172	192.168.2.4
Oct 23, 2024 15:38:35.569639921 CEST	49724	80	192.168.2.4	199.232.210.172
Oct 23, 2024 15:38:35.589257002 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.595227957 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.595252991 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.605988979 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.605999947 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.620836020 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.624305010 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.624346018 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.625005007 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.625017881 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.723192930 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.723876953 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.723891973 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.724673033 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.724677086 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.729496956 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.729908943 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.729952097 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.730531931 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.730539083 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.751436949 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.751502037 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.751620054 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.751770020 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.752007008 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.752048969 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.752085924 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.752103090 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.752530098 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.752568960 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.753426075 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.753438950 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.757097960 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.757194042 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.757278919 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.757450104 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.757523060 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.757559061 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.757615089 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.757812023 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.758016109 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.758059978 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.758090019 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.758105993 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.761265039 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.761292934 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.761471033 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.761692047 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.761704922 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.877090931 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.877286911 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.877376080 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.878695011 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.879446983 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.879523993 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.891132116 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.891531944 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.891624928 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.892824888 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.892824888 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.892844915 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.892854929 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.895811081 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.895863056 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.895895958 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.895914078 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.897030115 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.897079945 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.897113085 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.897130013 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.903084993 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.903136015 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.903415918 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.904268026 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.904345989 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.904411077 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.905419111 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.905441046 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.905527115 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.905756950 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.905790091 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.906037092 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.906069994 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:35.906246901 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:35.906274080 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.666382074 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.666970968 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.667022943 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.667540073 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.667552948 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.672298908 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.672780991 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.672848940 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.673192024 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.673206091 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.673966885 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.674293995 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.674326897 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.674618959 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.674623966 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.674730062 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.675018072 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.675018072 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.675029039 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.675281048 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.675292015 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.675627947 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.675632000 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.675723076 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.675729036 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.800416946 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.800479889 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.800622940 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.801050901 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.801078081 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.801096916 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.801105022 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.806811094 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.806859970 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.807106972 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.807354927 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.807370901 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.810328960 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.810570955 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.810599089 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.810679913 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.810745001 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.810777903 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.810884953 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.810930014 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.810966015 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.810982943 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.812144041 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.812184095 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.812356949 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.812372923 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.814557076 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.816014051 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.816044092 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.816286087 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.816442966 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.816492081 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.816495895 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.816538095 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.816557884 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.816994905 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.816994905 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.817013979 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.817034006 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.824246883 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.824297905 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.824672937 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.824692965 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.824717999 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.824950933 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.824982882 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.826584101 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.826607943 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.826675892 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.826675892 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.826693058 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.827047110 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.827058077 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.832271099 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.832298040 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:36.832372904 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.833301067 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:36.833326101 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.575978041 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.577425003 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.577510118 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.578404903 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.578414917 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.578428984 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.579540968 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.579595089 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.580893040 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.580905914 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.582114935 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.582433939 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.582449913 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.582984924 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.582994938 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.597011089 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.599514008 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.613346100 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.613365889 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.614954948 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.614960909 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.615092993 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.615099907 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.616152048 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.616161108 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.712690115 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.712762117 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.712951899 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.713176012 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.713176012 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.713226080 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.713258028 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.715825081 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.716047049 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.716104984 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.716213942 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.716213942 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.716254950 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.716279984 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.716324091 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.716370106 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.716505051 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.716636896 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.716649055 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.718523026 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.718579054 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.718653917 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.718801975 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.718810081 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.718820095 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.718866110 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.719144106 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.719177008 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.719194889 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.719221115 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.719233990 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.721029997 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.721059084 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.721111059 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.721242905 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.721256018 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.756242037 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.756261110 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.756442070 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.756458044 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.756509066 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.756509066 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.756653070 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.756653070 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.756669044 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.756676912 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.756709099 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.756712914 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.756733894 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.756737947 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.759346962 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.759424925 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.759430885 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.759516954 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.759524107 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.759598017 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.759673119 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.759696007 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:37.759707928 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:37.759737015 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.495295048 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.496265888 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.496303082 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.496998072 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.497004986 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.504642963 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.505034924 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.505069971 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.505472898 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.505481958 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.505978107 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.506347895 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.506356001 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.507044077 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.507049084 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.515654087 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.516294956 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.516326904 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.516894102 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.516904116 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.518497944 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.518871069 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.518882036 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.519589901 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.519597054 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.631459951 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.631807089 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.631860971 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.642698050 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.642779112 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.642863989 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.645267963 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.645416021 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.645453930 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.652609110 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.652755022 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.653178930 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.657150984 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.657314062 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.657432079 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.658804893 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.658823967 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.666404963 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.666429996 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.667833090 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.667860985 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.669126034 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.669133902 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.669152021 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.669162989 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.670532942 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.670559883 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.670577049 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.670584917 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.675901890 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.675931931 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.676250935 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.677650928 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.677696943 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.677761078 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.678411961 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.678447962 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.678524971 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.679301977 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.679327011 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.680222988 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.680238008 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.680758953 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.680771112 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.681562901 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.681641102 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.681720018 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.682521105 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.682531118 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.682625055 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.682650089 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.682683945 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:38.682810068 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:38.682823896 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.437798023 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.438549995 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.438848019 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.438885927 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.440433025 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.440450907 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.441315889 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.441380024 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.442053080 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.442075014 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.448194027 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.448811054 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.448846102 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.449695110 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.449707031 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.452276945 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.452579975 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.452611923 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.453077078 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.453084946 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.453573942 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.453958988 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.454021931 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.454520941 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.454535007 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.571809053 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.571954966 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.572115898 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.572175026 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.572175026 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.572220087 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.572244883 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.575089931 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.575139046 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.575210094 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.575212002 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.575334072 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.575380087 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.575427055 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.575444937 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.575473070 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.575479984 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.575562954 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.575592995 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.577717066 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.577752113 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.577953100 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.578171968 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.578182936 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.586246967 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.586530924 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.586606026 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.586637974 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.586657047 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.586678028 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.586688995 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.588536024 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.588697910 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.588773966 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.588824987 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.588848114 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.588875055 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.588888884 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.588915110 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.588932037 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.588938951 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.589153051 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.589169979 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.590960026 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.590984106 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.591054916 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.591161013 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.591181040 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.599781990 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.599852085 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.599931955 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.600081921 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.600081921 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.600123882 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.600152016 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.602263927 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.602286100 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:39.602483034 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.602642059 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:39.602660894 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.321177959 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.321836948 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.321851969 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.322249889 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.322254896 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.349832058 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.350270987 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.350327015 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.350683928 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.350697994 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.360276937 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.360795021 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.360886097 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.361166954 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.361182928 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.362564087 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.362946033 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.362956047 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.363329887 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.363333941 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.389774084 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.390405893 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.390471935 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.390737057 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.390752077 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.458089113 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.458189011 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.458298922 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.458437920 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.458456039 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.458467007 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.458472967 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.461519003 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.461602926 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.461781025 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.461946964 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.461967945 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.491630077 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.491725922 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.491877079 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.491956949 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.491997957 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.492027044 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.492043018 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.494517088 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.494606972 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.494697094 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.494863987 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.494903088 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.503823996 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.504117966 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.504304886 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.504304886 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.504304886 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.504820108 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.504988909 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.505137920 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.505233049 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.505254984 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.505287886 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.505292892 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.506876945 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.506963968 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.507174969 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.507322073 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.507344961 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.507359982 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.507447958 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.507617950 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.507708073 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.507730961 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.530050993 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.530437946 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.530613899 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.530613899 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.530615091 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.532435894 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.532522917 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.532697916 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.532826900 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.532860994 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.723664999 CEST	54398	53	192.168.2.4	1.1.1.1
Oct 23, 2024 15:38:40.729231119 CEST	53	54398	1.1.1.1	192.168.2.4
Oct 23, 2024 15:38:40.729295015 CEST	54398	53	192.168.2.4	1.1.1.1
Oct 23, 2024 15:38:40.729347944 CEST	54398	53	192.168.2.4	1.1.1.1
Oct 23, 2024 15:38:40.734924078 CEST	53	54398	1.1.1.1	192.168.2.4
Oct 23, 2024 15:38:40.745835066 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.745910883 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:40.808352947 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:40.808430910 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.236478090 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.237062931 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.237129927 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.237524986 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.237539053 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.257649899 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.257807016 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.258126974 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.258214951 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.258249044 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.258266926 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.258584976 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.258598089 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.258640051 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.258650064 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.275393963 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.275913954 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.275971889 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.276462078 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.276473999 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.297207117 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.297771931 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.297807932 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.298249006 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.298259020 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.337008953 CEST	53	54398	1.1.1.1	192.168.2.4
Oct 23, 2024 15:38:41.337748051 CEST	54398	53	192.168.2.4	1.1.1.1
Oct 23, 2024 15:38:41.344254017 CEST	53	54398	1.1.1.1	192.168.2.4
Oct 23, 2024 15:38:41.344305992 CEST	54398	53	192.168.2.4	1.1.1.1
Oct 23, 2024 15:38:41.373956919 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.374193907 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.374298096 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.374387026 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.374387026 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.374432087 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.374461889 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.377073050 CEST	54402	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.377113104 CEST	443	54402	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.377413988 CEST	54402	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.377413988 CEST	54402	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.377451897 CEST	443	54402	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.394190073 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.394750118 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.394835949 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.394959927 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.395003080 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.395034075 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.395050049 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.398143053 CEST	54403	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.398216009 CEST	443	54403	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.398305893 CEST	54403	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.398492098 CEST	54403	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.398519993 CEST	443	54403	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.399935007 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.399957895 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.400012970 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.400054932 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.400124073 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.400150061 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.400166988 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.400172949 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.400233984 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.402699947 CEST	54404	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.402781010 CEST	443	54404	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.402853012 CEST	54404	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.402971983 CEST	54404	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.402992964 CEST	443	54404	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.415261984 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.415431023 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.415612936 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.415612936 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.415612936 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.417792082 CEST	54405	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.417838097 CEST	443	54405	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.418062925 CEST	54405	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.418199062 CEST	54405	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.418215036 CEST	443	54405	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.436800003 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.436858892 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.436950922 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.437016964 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.437052965 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.437129974 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.437129974 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.437180996 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.437213898 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.437228918 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.439336061 CEST	54406	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.439383984 CEST	443	54406	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.439584017 CEST	54406	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.439703941 CEST	54406	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.439724922 CEST	443	54406	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:41.730274916 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:41.730346918 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.142286062 CEST	443	54402	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.142976999 CEST	54402	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.143004894 CEST	443	54402	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.143682003 CEST	54402	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.143702030 CEST	443	54402	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.159475088 CEST	443	54404	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.160162926 CEST	54404	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.160242081 CEST	443	54404	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.160859108 CEST	54404	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.160872936 CEST	443	54404	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.160885096 CEST	443	54403	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.161330938 CEST	54403	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.161391973 CEST	443	54403	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.161959887 CEST	54403	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.161973953 CEST	443	54403	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.179117918 CEST	443	54405	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.179596901 CEST	54405	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.179665089 CEST	443	54405	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.180156946 CEST	54405	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.180169106 CEST	443	54405	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.201262951 CEST	443	54406	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.201874971 CEST	54406	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.201886892 CEST	443	54406	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.202423096 CEST	54406	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.202429056 CEST	443	54406	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.278387070 CEST	443	54402	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.278417110 CEST	443	54402	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.278477907 CEST	54402	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.278489113 CEST	443	54402	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.278553963 CEST	54402	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.278882980 CEST	54402	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.278912067 CEST	443	54402	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.278930902 CEST	54402	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.278942108 CEST	443	54402	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.282744884 CEST	54407	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.282824039 CEST	443	54407	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.282923937 CEST	54407	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.283152103 CEST	54407	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.283185959 CEST	443	54407	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.294411898 CEST	54408	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:38:42.294497967 CEST	443	54408	35.190.80.1	192.168.2.4
Oct 23, 2024 15:38:42.294603109 CEST	54408	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:38:42.295135021 CEST	54408	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:38:42.295170069 CEST	443	54408	35.190.80.1	192.168.2.4
Oct 23, 2024 15:38:42.298969030 CEST	443	54404	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.299048901 CEST	443	54404	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.299247980 CEST	54404	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.299355030 CEST	54404	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.299355030 CEST	54404	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.299400091 CEST	443	54404	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.299427986 CEST	443	54404	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.300842047 CEST	443	54403	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.300864935 CEST	443	54403	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.300903082 CEST	443	54403	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.300950050 CEST	54403	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.300997019 CEST	54403	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.301104069 CEST	54403	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.301150084 CEST	443	54403	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.301183939 CEST	54403	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.301198006 CEST	443	54403	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.302880049 CEST	54409	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.302921057 CEST	443	54409	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.303020954 CEST	54409	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.303169966 CEST	54409	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.303184986 CEST	443	54409	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.304389000 CEST	54410	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.304476023 CEST	443	54410	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.304558992 CEST	54410	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.304752111 CEST	54410	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.304786921 CEST	443	54410	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.316817999 CEST	443	54405	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.316958904 CEST	443	54405	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.317040920 CEST	54405	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.317164898 CEST	54405	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.317179918 CEST	443	54405	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.317192078 CEST	54405	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.317198038 CEST	443	54405	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.319876909 CEST	54411	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.319890022 CEST	443	54411	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.319971085 CEST	54411	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.320184946 CEST	54411	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.320207119 CEST	443	54411	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.339090109 CEST	443	54406	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.339381933 CEST	443	54406	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.339646101 CEST	54406	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.339647055 CEST	54406	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.339647055 CEST	54406	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.342653990 CEST	54412	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.342737913 CEST	443	54412	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.343020916 CEST	54412	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.343020916 CEST	54412	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.343147993 CEST	443	54412	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.652107954 CEST	54406	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:42.652182102 CEST	443	54406	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:42.728677034 CEST	54413	443	192.168.2.4	216.58.206.68
Oct 23, 2024 15:38:42.728773117 CEST	443	54413	216.58.206.68	192.168.2.4
Oct 23, 2024 15:38:42.728898048 CEST	54413	443	192.168.2.4	216.58.206.68
Oct 23, 2024 15:38:42.729337931 CEST	54413	443	192.168.2.4	216.58.206.68
Oct 23, 2024 15:38:42.729417086 CEST	443	54413	216.58.206.68	192.168.2.4
Oct 23, 2024 15:38:42.922406912 CEST	443	54408	35.190.80.1	192.168.2.4
Oct 23, 2024 15:38:42.923010111 CEST	54408	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:38:42.923074961 CEST	443	54408	35.190.80.1	192.168.2.4
Oct 23, 2024 15:38:42.924587965 CEST	443	54408	35.190.80.1	192.168.2.4
Oct 23, 2024 15:38:42.924660921 CEST	54408	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:38:42.925549984 CEST	54408	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:38:42.925640106 CEST	443	54408	35.190.80.1	192.168.2.4
Oct 23, 2024 15:38:42.926265955 CEST	54408	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:38:42.926285982 CEST	443	54408	35.190.80.1	192.168.2.4
Oct 23, 2024 15:38:42.969728947 CEST	54408	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:38:43.039851904 CEST	443	54407	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.040565014 CEST	54407	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.040601015 CEST	443	54407	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.041676998 CEST	54407	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.041690111 CEST	443	54407	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.056102991 CEST	443	54410	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.057008028 CEST	54410	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.057070971 CEST	443	54410	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.058022976 CEST	54410	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.058037043 CEST	443	54410	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.060447931 CEST	443	54409	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.061058044 CEST	54409	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.061119080 CEST	443	54409	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.062041044 CEST	54409	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.062058926 CEST	443	54409	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.071686983 CEST	443	54408	35.190.80.1	192.168.2.4
Oct 23, 2024 15:38:43.072678089 CEST	54408	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:38:43.072721958 CEST	443	54408	35.190.80.1	192.168.2.4
Oct 23, 2024 15:38:43.072802067 CEST	443	54408	35.190.80.1	192.168.2.4
Oct 23, 2024 15:38:43.072823048 CEST	54408	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:38:43.072891951 CEST	54408	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:38:43.074949026 CEST	443	54411	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.075849056 CEST	54411	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.075866938 CEST	443	54411	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.076638937 CEST	54411	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.076646090 CEST	443	54411	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.076813936 CEST	54414	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:38:43.076858997 CEST	443	54414	35.190.80.1	192.168.2.4
Oct 23, 2024 15:38:43.079521894 CEST	54414	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:38:43.112034082 CEST	443	54412	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.112498999 CEST	54414	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:38:43.112518072 CEST	443	54414	35.190.80.1	192.168.2.4
Oct 23, 2024 15:38:43.115534067 CEST	54412	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.115597963 CEST	443	54412	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.116555929 CEST	54412	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.116568089 CEST	443	54412	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.177926064 CEST	443	54407	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.178388119 CEST	443	54407	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.178469896 CEST	54407	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.178556919 CEST	54407	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.178581953 CEST	443	54407	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.178599119 CEST	54407	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.178606033 CEST	443	54407	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.184988022 CEST	54415	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.185079098 CEST	443	54415	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.185177088 CEST	54415	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.185797930 CEST	54415	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.185832977 CEST	443	54415	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.192502022 CEST	443	54410	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.192601919 CEST	443	54410	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.192677975 CEST	54410	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.193011045 CEST	54410	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.193053961 CEST	443	54410	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.193149090 CEST	54410	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.193166971 CEST	443	54410	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.196578026 CEST	443	54409	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.196872950 CEST	443	54409	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.197052002 CEST	54409	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.197227955 CEST	54409	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.197252035 CEST	443	54409	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.197268963 CEST	54409	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.197277069 CEST	443	54409	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.204334974 CEST	54416	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.204365969 CEST	443	54416	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.204571962 CEST	54416	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.205717087 CEST	54416	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.205734968 CEST	443	54416	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.207484007 CEST	54417	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.207535982 CEST	443	54417	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.207622051 CEST	54417	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.207973957 CEST	54417	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.207990885 CEST	443	54417	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.211620092 CEST	443	54411	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.212045908 CEST	443	54411	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.212100029 CEST	54411	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.212373972 CEST	54411	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.212387085 CEST	443	54411	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.212404013 CEST	54411	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.212410927 CEST	443	54411	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.215756893 CEST	54418	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.215778112 CEST	443	54418	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.215991974 CEST	54418	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.216173887 CEST	54418	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.216188908 CEST	443	54418	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.251879930 CEST	443	54412	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.252042055 CEST	443	54412	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.252119064 CEST	54412	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.252320051 CEST	54412	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.252357960 CEST	443	54412	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.252384901 CEST	54412	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.252399921 CEST	443	54412	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.257529974 CEST	54419	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.257556915 CEST	443	54419	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.257690907 CEST	54419	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.257846117 CEST	54419	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.257873058 CEST	443	54419	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.680290937 CEST	443	54413	216.58.206.68	192.168.2.4
Oct 23, 2024 15:38:43.680672884 CEST	54413	443	192.168.2.4	216.58.206.68
Oct 23, 2024 15:38:43.680707932 CEST	443	54413	216.58.206.68	192.168.2.4
Oct 23, 2024 15:38:43.682195902 CEST	443	54413	216.58.206.68	192.168.2.4
Oct 23, 2024 15:38:43.683073997 CEST	54413	443	192.168.2.4	216.58.206.68
Oct 23, 2024 15:38:43.683173895 CEST	443	54413	216.58.206.68	192.168.2.4
Oct 23, 2024 15:38:43.724695921 CEST	443	54414	35.190.80.1	192.168.2.4
Oct 23, 2024 15:38:43.735358953 CEST	54413	443	192.168.2.4	216.58.206.68
Oct 23, 2024 15:38:43.743904114 CEST	54414	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:38:43.743954897 CEST	443	54414	35.190.80.1	192.168.2.4
Oct 23, 2024 15:38:43.745109081 CEST	443	54414	35.190.80.1	192.168.2.4
Oct 23, 2024 15:38:43.797964096 CEST	54414	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:38:43.948110104 CEST	54414	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:38:43.948318958 CEST	54414	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:38:43.948348999 CEST	443	54414	35.190.80.1	192.168.2.4
Oct 23, 2024 15:38:43.948431969 CEST	443	54414	35.190.80.1	192.168.2.4
Oct 23, 2024 15:38:43.954509020 CEST	443	54415	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.962380886 CEST	443	54417	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.964574099 CEST	54415	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.964632988 CEST	443	54415	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.965184927 CEST	54415	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.965198040 CEST	443	54415	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.965996027 CEST	443	54416	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.966201067 CEST	54417	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.966263056 CEST	443	54417	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.966340065 CEST	54416	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.966372013 CEST	443	54416	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.966873884 CEST	54417	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.966886044 CEST	443	54417	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.966957092 CEST	54416	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.966963053 CEST	443	54416	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.981823921 CEST	443	54418	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.982461929 CEST	54418	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.982480049 CEST	443	54418	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:43.983123064 CEST	54418	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:43.983133078 CEST	443	54418	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.001041889 CEST	54414	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:38:44.014384031 CEST	443	54419	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.015202045 CEST	54419	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.015228033 CEST	443	54419	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.016060114 CEST	54419	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.016072989 CEST	443	54419	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.095527887 CEST	443	54414	35.190.80.1	192.168.2.4
Oct 23, 2024 15:38:44.096291065 CEST	54414	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:38:44.096354961 CEST	443	54414	35.190.80.1	192.168.2.4
Oct 23, 2024 15:38:44.096524954 CEST	443	54414	35.190.80.1	192.168.2.4
Oct 23, 2024 15:38:44.096553087 CEST	54414	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:38:44.096602917 CEST	54414	443	192.168.2.4	35.190.80.1
Oct 23, 2024 15:38:44.099073887 CEST	443	54417	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.099104881 CEST	443	54417	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.099148989 CEST	443	54417	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.099174976 CEST	54417	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.099222898 CEST	54417	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.099534035 CEST	54417	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.099570990 CEST	443	54417	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.099596977 CEST	54417	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.099611998 CEST	443	54417	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.100038052 CEST	443	54415	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.100089073 CEST	443	54415	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.100235939 CEST	54415	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.100373030 CEST	54415	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.100421906 CEST	443	54415	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.100451946 CEST	54415	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.100469112 CEST	443	54415	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.103116989 CEST	443	54416	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.103805065 CEST	54420	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.103849888 CEST	443	54420	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.103950977 CEST	54420	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.103996038 CEST	443	54416	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.104063988 CEST	54416	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.104172945 CEST	54421	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.104249954 CEST	54416	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.104249954 CEST	54416	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.104273081 CEST	443	54421	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.104291916 CEST	443	54416	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.104315042 CEST	54420	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.104317904 CEST	443	54416	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.104341030 CEST	54421	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.104346037 CEST	443	54420	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.104652882 CEST	54421	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.104687929 CEST	443	54421	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.106744051 CEST	54422	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.106765985 CEST	443	54422	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.106853962 CEST	54422	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.107048035 CEST	54422	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.107072115 CEST	443	54422	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.119692087 CEST	443	54418	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.119856119 CEST	443	54418	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.120002031 CEST	54418	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.120039940 CEST	54418	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.120058060 CEST	443	54418	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.120099068 CEST	54418	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.120112896 CEST	443	54418	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.122706890 CEST	54423	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.122731924 CEST	443	54423	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.122811079 CEST	54423	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.122973919 CEST	54423	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.122998953 CEST	443	54423	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.150759935 CEST	443	54419	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.150787115 CEST	443	54419	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.150825977 CEST	443	54419	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.150876045 CEST	54419	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.150930882 CEST	54419	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.151957989 CEST	54419	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.151981115 CEST	443	54419	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.152004004 CEST	54419	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.152014971 CEST	443	54419	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.161731005 CEST	54424	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.161815882 CEST	443	54424	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.162070036 CEST	54424	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.162266970 CEST	54424	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.162300110 CEST	443	54424	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.879014015 CEST	443	54420	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.884080887 CEST	54420	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.884141922 CEST	443	54420	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.885087013 CEST	54420	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.885102987 CEST	443	54420	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.886163950 CEST	443	54422	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.887000084 CEST	54422	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.887018919 CEST	443	54422	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.887830973 CEST	54422	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.887844086 CEST	443	54422	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.890144110 CEST	443	54423	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.891556978 CEST	443	54421	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.893484116 CEST	54423	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.893505096 CEST	443	54423	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.893894911 CEST	54423	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.893903017 CEST	443	54423	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.894949913 CEST	54421	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.894968987 CEST	443	54421	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.895829916 CEST	54421	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.895838022 CEST	443	54421	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.911540985 CEST	443	54424	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.912307024 CEST	54424	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.912365913 CEST	443	54424	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:44.913044930 CEST	54424	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:44.913058043 CEST	443	54424	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.018285036 CEST	443	54420	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.018359900 CEST	443	54420	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.018414974 CEST	54420	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.019144058 CEST	54420	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.019172907 CEST	443	54420	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.019191027 CEST	54420	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.019200087 CEST	443	54420	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.024003983 CEST	443	54422	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.024055958 CEST	443	54422	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.024096012 CEST	54422	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.027579069 CEST	443	54423	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.027781963 CEST	443	54423	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.027833939 CEST	54423	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.027864933 CEST	443	54423	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.027998924 CEST	443	54423	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.028043032 CEST	54423	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.028415918 CEST	54422	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.028449059 CEST	443	54422	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.028469086 CEST	54422	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.028476954 CEST	443	54422	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.030260086 CEST	443	54421	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.030330896 CEST	443	54421	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.030390978 CEST	54421	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.036276102 CEST	54421	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.036298990 CEST	443	54421	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.036322117 CEST	54421	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.036329985 CEST	443	54421	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.045299053 CEST	443	54424	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.045360088 CEST	443	54424	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.045439959 CEST	54424	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.051480055 CEST	54423	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.051501036 CEST	443	54423	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.051515102 CEST	54423	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.051522017 CEST	443	54423	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.053765059 CEST	54424	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.053811073 CEST	443	54424	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.053843021 CEST	54424	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.053858995 CEST	443	54424	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.068552017 CEST	54425	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.068583012 CEST	443	54425	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.068640947 CEST	54425	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.075699091 CEST	54426	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.075747967 CEST	443	54426	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.075824022 CEST	54426	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.081609011 CEST	54427	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.081635952 CEST	443	54427	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.081840038 CEST	54427	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.089829922 CEST	54425	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.089849949 CEST	443	54425	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.090687990 CEST	54426	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.090720892 CEST	443	54426	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.102479935 CEST	54428	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.102515936 CEST	443	54428	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.102585077 CEST	54428	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.102943897 CEST	54428	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.102960110 CEST	443	54428	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.103568077 CEST	54427	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.103581905 CEST	443	54427	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.117444038 CEST	54429	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.117501020 CEST	443	54429	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.117569923 CEST	54429	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.118262053 CEST	54429	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.118279934 CEST	443	54429	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.835144043 CEST	443	54425	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.836056948 CEST	54425	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.836082935 CEST	443	54425	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.837110996 CEST	54425	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.837116957 CEST	443	54425	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.849261045 CEST	443	54426	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.854815006 CEST	54426	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.854892015 CEST	443	54426	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.855259895 CEST	443	54427	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.855401039 CEST	54426	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.855416059 CEST	443	54426	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.855734110 CEST	54427	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.855750084 CEST	443	54427	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.856232882 CEST	54427	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.856237888 CEST	443	54427	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.886858940 CEST	443	54428	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.887448072 CEST	54428	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.887478113 CEST	443	54428	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.887942076 CEST	54428	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.887950897 CEST	443	54428	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.887989998 CEST	443	54429	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.888386011 CEST	54429	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.888412952 CEST	443	54429	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.888829947 CEST	54429	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.888835907 CEST	443	54429	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.969436884 CEST	443	54425	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.969525099 CEST	443	54425	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.969567060 CEST	54425	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:45.988404989 CEST	443	54426	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.988588095 CEST	443	54426	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:45.988797903 CEST	54426	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:46.003140926 CEST	443	54427	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:46.003164053 CEST	443	54427	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:46.003206968 CEST	443	54427	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:46.003289938 CEST	54427	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:46.024338961 CEST	54425	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:46.024364948 CEST	443	54425	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:46.024456978 CEST	54425	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:46.024463892 CEST	443	54425	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:46.026002884 CEST	443	54428	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:46.026077032 CEST	443	54428	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:46.026233912 CEST	54428	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:46.026839972 CEST	54428	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:46.026889086 CEST	443	54428	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:46.026917934 CEST	54428	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:46.026936054 CEST	443	54428	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:46.027045012 CEST	443	54429	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:46.027520895 CEST	443	54429	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:46.027565002 CEST	54429	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:46.027570963 CEST	443	54429	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:46.027904987 CEST	54429	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:46.028322935 CEST	54429	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:46.028342962 CEST	443	54429	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:46.028354883 CEST	54429	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:46.028361082 CEST	443	54429	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:46.031034946 CEST	54426	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:46.031110048 CEST	443	54426	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:46.031143904 CEST	54426	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:46.031162977 CEST	443	54426	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:46.052181005 CEST	54427	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:46.052181005 CEST	54427	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:46.052191019 CEST	443	54427	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:46.052198887 CEST	443	54427	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:46.355990887 CEST	54430	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:46.356089115 CEST	443	54430	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:46.356400967 CEST	54430	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:46.491264105 CEST	54430	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:46.491350889 CEST	443	54430	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:46.497399092 CEST	54431	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:46.497442961 CEST	443	54431	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:46.497569084 CEST	54431	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:46.497703075 CEST	54431	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:46.497714043 CEST	443	54431	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:46.499064922 CEST	54432	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:46.499151945 CEST	443	54432	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:46.499300957 CEST	54432	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:46.516237020 CEST	54433	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:46.516340017 CEST	443	54433	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:46.516504049 CEST	54432	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:46.516521931 CEST	443	54432	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:46.516568899 CEST	54433	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:46.540080070 CEST	54433	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:46.540134907 CEST	443	54433	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:46.554717064 CEST	54434	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:46.554743052 CEST	443	54434	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:46.554886103 CEST	54434	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:46.555723906 CEST	54434	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:46.555749893 CEST	443	54434	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.257919073 CEST	443	54431	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.258498907 CEST	54431	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.258527040 CEST	443	54431	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.258948088 CEST	54431	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.258954048 CEST	443	54431	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.270831108 CEST	443	54430	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.271353006 CEST	54430	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.271414042 CEST	443	54430	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.271792889 CEST	54430	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.271847010 CEST	443	54430	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.281531096 CEST	443	54432	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.281877995 CEST	54432	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.281908035 CEST	443	54432	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.282515049 CEST	54432	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.282522917 CEST	443	54432	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.294425964 CEST	443	54433	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.294735909 CEST	54433	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.294796944 CEST	443	54433	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.295051098 CEST	54433	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.295063972 CEST	443	54433	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.310394049 CEST	443	54434	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.310806036 CEST	54434	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.310837030 CEST	443	54434	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.311172962 CEST	54434	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.311199903 CEST	443	54434	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.396802902 CEST	443	54431	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.397063017 CEST	443	54431	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.397128105 CEST	54431	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.397401094 CEST	54431	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.397418022 CEST	443	54431	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.397444010 CEST	54431	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.397449970 CEST	443	54431	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.402252913 CEST	54435	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.402313948 CEST	443	54435	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.402391911 CEST	54435	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.402652979 CEST	54435	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.402678013 CEST	443	54435	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.411561012 CEST	443	54430	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.411725044 CEST	443	54430	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.411907911 CEST	54430	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.412273884 CEST	54430	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.412273884 CEST	54430	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.412344933 CEST	443	54430	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.412379980 CEST	443	54430	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.417464972 CEST	54436	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.417555094 CEST	443	54436	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.417642117 CEST	54436	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.417973995 CEST	54436	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.418010950 CEST	443	54436	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.423043013 CEST	443	54432	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.423099041 CEST	443	54432	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.423154116 CEST	54432	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.423253059 CEST	54432	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.423276901 CEST	443	54432	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.423296928 CEST	54432	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.423305035 CEST	443	54432	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.425667048 CEST	54437	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.425708055 CEST	443	54437	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.425791025 CEST	54437	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.425935984 CEST	54437	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.425951958 CEST	443	54437	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.430129051 CEST	443	54433	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.430249929 CEST	443	54433	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.430315018 CEST	54433	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.430393934 CEST	54433	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.430418968 CEST	443	54433	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.430443048 CEST	54433	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.430455923 CEST	443	54433	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.432426929 CEST	54438	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.432511091 CEST	443	54438	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.432598114 CEST	54438	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.432751894 CEST	54438	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.432785034 CEST	443	54438	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.448090076 CEST	443	54434	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.448154926 CEST	443	54434	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.448257923 CEST	443	54434	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.448322058 CEST	54434	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.448323011 CEST	54434	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.448410034 CEST	54434	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.448410034 CEST	54434	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.448450089 CEST	443	54434	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.448481083 CEST	443	54434	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.450373888 CEST	54439	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.450413942 CEST	443	54439	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:47.450473070 CEST	54439	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.450603008 CEST	54439	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:47.450612068 CEST	443	54439	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.166946888 CEST	443	54435	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.167521954 CEST	54435	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.167582035 CEST	443	54435	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.167999029 CEST	54435	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.168010950 CEST	443	54435	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.171468973 CEST	443	54437	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.171848059 CEST	54437	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.171881914 CEST	443	54437	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.172322035 CEST	54437	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.172328949 CEST	443	54437	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.184607983 CEST	443	54436	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.185091019 CEST	54436	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.185153961 CEST	443	54436	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.185499907 CEST	54436	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.185517073 CEST	443	54436	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.198076963 CEST	443	54439	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.198587894 CEST	54439	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.198626995 CEST	443	54439	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.199007034 CEST	443	54438	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.199009895 CEST	54439	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.199018955 CEST	443	54439	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.199348927 CEST	54438	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.199371099 CEST	443	54438	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.199681044 CEST	54438	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.199692011 CEST	443	54438	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.304270983 CEST	443	54435	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.304347992 CEST	443	54435	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.304449081 CEST	54435	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.304733992 CEST	54435	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.304781914 CEST	443	54435	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.304811001 CEST	54435	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.304827929 CEST	443	54435	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.306699038 CEST	443	54437	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.306721926 CEST	443	54437	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.306771994 CEST	443	54437	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.306869984 CEST	54437	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.306869984 CEST	54437	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.307002068 CEST	54437	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.307029009 CEST	443	54437	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.307044983 CEST	54437	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.307054043 CEST	443	54437	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.307816982 CEST	54440	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.307934046 CEST	443	54440	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.308012962 CEST	54440	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.308337927 CEST	54440	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.308372974 CEST	443	54440	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.309299946 CEST	54441	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.309330940 CEST	443	54441	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.309415102 CEST	54441	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.309526920 CEST	54441	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.309539080 CEST	443	54441	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.323524952 CEST	443	54436	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.323692083 CEST	443	54436	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.323786020 CEST	54436	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.323865891 CEST	54436	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.323865891 CEST	54436	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.323906898 CEST	443	54436	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.323947906 CEST	443	54436	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.325962067 CEST	54442	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.326046944 CEST	443	54442	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.326148987 CEST	54442	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.326258898 CEST	54442	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.326287985 CEST	443	54442	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.333506107 CEST	443	54439	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.333561897 CEST	443	54439	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.333774090 CEST	54439	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.333775043 CEST	54439	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.333775043 CEST	54439	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.335622072 CEST	54443	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.335638046 CEST	443	54443	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.335732937 CEST	54443	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.335823059 CEST	54443	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.335834026 CEST	443	54443	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.339713097 CEST	443	54438	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.339956999 CEST	443	54438	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.340142965 CEST	54438	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.340142965 CEST	54438	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.340142965 CEST	54438	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.342048883 CEST	54444	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.342135906 CEST	443	54444	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.342232943 CEST	54444	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.342545986 CEST	54444	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.342628956 CEST	443	54444	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.641673088 CEST	54439	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.641694069 CEST	54438	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:48.641710997 CEST	443	54439	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:48.641727924 CEST	443	54438	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.060575008 CEST	443	54441	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.061342001 CEST	54441	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.061363935 CEST	443	54441	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.061640024 CEST	54441	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.061646938 CEST	443	54441	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.069092035 CEST	443	54440	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.069642067 CEST	54440	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.069721937 CEST	443	54440	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.070070982 CEST	54440	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.070085049 CEST	443	54440	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.104412079 CEST	443	54443	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.104960918 CEST	54443	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.104979038 CEST	443	54443	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.105530024 CEST	54443	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.105535030 CEST	443	54443	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.109112978 CEST	443	54442	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.109608889 CEST	54442	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.109641075 CEST	443	54442	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.109889030 CEST	54442	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.109896898 CEST	443	54442	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.111341000 CEST	443	54444	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.111711025 CEST	54444	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.111742973 CEST	443	54444	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.112087965 CEST	54444	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.112095118 CEST	443	54444	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.197973013 CEST	443	54441	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.198004961 CEST	443	54441	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.198057890 CEST	443	54441	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.198163033 CEST	54441	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.198163033 CEST	54441	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.198353052 CEST	54441	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.198383093 CEST	443	54441	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.198398113 CEST	54441	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.198404074 CEST	443	54441	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.201797009 CEST	54445	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.201889038 CEST	443	54445	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.202055931 CEST	54445	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.202255011 CEST	54445	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.202292919 CEST	443	54445	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.208338976 CEST	443	54440	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.208431005 CEST	443	54440	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.208564997 CEST	54440	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.208633900 CEST	54440	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.208679914 CEST	443	54440	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.208714008 CEST	54440	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.208730936 CEST	443	54440	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.211750031 CEST	54446	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.211798906 CEST	443	54446	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.211884975 CEST	54446	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.212093115 CEST	54446	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.212107897 CEST	443	54446	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.241427898 CEST	443	54443	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.241523981 CEST	443	54443	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.241697073 CEST	54443	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.241836071 CEST	54443	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.241851091 CEST	443	54443	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.241861105 CEST	54443	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.241867065 CEST	443	54443	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.245003939 CEST	54447	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.245052099 CEST	443	54447	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.245121002 CEST	54447	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.245297909 CEST	54447	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.245325089 CEST	443	54447	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.248255014 CEST	443	54444	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.248428106 CEST	443	54444	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.248475075 CEST	54444	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.248502016 CEST	54444	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.248521090 CEST	443	54444	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.248537064 CEST	54444	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.248543024 CEST	443	54444	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.249727964 CEST	443	54442	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.250063896 CEST	443	54442	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.250145912 CEST	54442	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.250181913 CEST	54442	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.250181913 CEST	54442	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.250202894 CEST	443	54442	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.250231028 CEST	443	54442	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.251590967 CEST	54448	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.251612902 CEST	443	54448	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.251722097 CEST	54448	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.251816034 CEST	54448	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.251830101 CEST	443	54448	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.253185987 CEST	54449	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.253273010 CEST	443	54449	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.253353119 CEST	54449	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.253556013 CEST	54449	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.253585100 CEST	443	54449	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.972012997 CEST	443	54445	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.972696066 CEST	54445	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.972762108 CEST	443	54445	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.973267078 CEST	54445	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.973294973 CEST	443	54445	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.982486963 CEST	443	54446	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.982944965 CEST	54446	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.982999086 CEST	443	54446	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:49.983616114 CEST	54446	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:49.983630896 CEST	443	54446	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.013401031 CEST	443	54449	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.013948917 CEST	54449	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.014010906 CEST	443	54449	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.014398098 CEST	54449	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.014413118 CEST	443	54449	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.019386053 CEST	443	54447	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.019793034 CEST	54447	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.019831896 CEST	443	54447	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.020179033 CEST	54447	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.020183086 CEST	443	54447	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.022099972 CEST	443	54448	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.022578001 CEST	54448	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.022603035 CEST	443	54448	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.022931099 CEST	54448	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.022936106 CEST	443	54448	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.112683058 CEST	443	54445	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.112715006 CEST	443	54445	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.112786055 CEST	443	54445	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.112802982 CEST	54445	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.112854958 CEST	54445	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.113193989 CEST	54445	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.113233089 CEST	443	54445	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.113248110 CEST	54445	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.113256931 CEST	443	54445	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.116960049 CEST	54450	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.117000103 CEST	443	54450	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.117221117 CEST	54450	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.117413998 CEST	54450	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.117429972 CEST	443	54450	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.120718002 CEST	443	54446	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.120796919 CEST	443	54446	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.120945930 CEST	54446	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.120994091 CEST	54446	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.121026039 CEST	443	54446	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.121042967 CEST	54446	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.121051073 CEST	443	54446	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.123414993 CEST	54451	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.123462915 CEST	443	54451	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.123533010 CEST	54451	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.123688936 CEST	54451	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.123703003 CEST	443	54451	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.160588026 CEST	443	54447	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.160612106 CEST	443	54447	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.160650969 CEST	443	54447	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.160698891 CEST	54447	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.160784006 CEST	54447	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.160979986 CEST	54447	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.161026001 CEST	443	54447	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.161053896 CEST	54447	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.161070108 CEST	443	54447	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.162450075 CEST	443	54448	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.162538052 CEST	443	54448	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.162708044 CEST	54448	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.162766933 CEST	54448	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.162787914 CEST	443	54448	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.162822962 CEST	54448	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.162828922 CEST	443	54448	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.164349079 CEST	54452	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.164397001 CEST	443	54452	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.164484024 CEST	54452	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.164623976 CEST	54452	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.164640903 CEST	443	54452	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.164706945 CEST	443	54449	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.164746046 CEST	443	54449	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.164803028 CEST	443	54449	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.164871931 CEST	54449	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.165036917 CEST	54449	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.165036917 CEST	54449	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.165082932 CEST	443	54449	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.165110111 CEST	443	54449	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.165344000 CEST	54453	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.165440083 CEST	443	54453	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.165524960 CEST	54453	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.165676117 CEST	54453	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.165708065 CEST	443	54453	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.166738033 CEST	54454	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.166764021 CEST	443	54454	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.166858912 CEST	54454	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.166964054 CEST	54454	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.166990995 CEST	443	54454	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.883472919 CEST	443	54451	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.884593964 CEST	54451	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.884660006 CEST	443	54451	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.885581970 CEST	54451	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.885596037 CEST	443	54451	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.885893106 CEST	443	54450	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.886365891 CEST	54450	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.886385918 CEST	443	54450	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.887130022 CEST	54450	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.887140989 CEST	443	54450	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.919296026 CEST	443	54453	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.920002937 CEST	54453	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.920068026 CEST	443	54453	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.920579910 CEST	54453	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.920593023 CEST	443	54453	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.931554079 CEST	443	54454	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.932548046 CEST	54454	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.932589054 CEST	443	54454	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.933505058 CEST	54454	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.933517933 CEST	443	54454	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.935340881 CEST	443	54452	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.935930014 CEST	54452	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.935961962 CEST	443	54452	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:50.936686993 CEST	54452	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:50.936703920 CEST	443	54452	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.018389940 CEST	443	54451	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.018644094 CEST	443	54451	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.018716097 CEST	443	54451	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.018768072 CEST	54451	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.023849010 CEST	443	54450	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.023963928 CEST	443	54450	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.024738073 CEST	54450	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.041393995 CEST	54451	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.041433096 CEST	443	54451	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.041450977 CEST	54451	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.041460037 CEST	443	54451	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.043123960 CEST	54450	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.043152094 CEST	443	54450	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.047127008 CEST	54455	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.047182083 CEST	443	54455	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.047429085 CEST	54455	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.049797058 CEST	54455	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.049824953 CEST	443	54455	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.051943064 CEST	54456	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.051992893 CEST	443	54456	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.053046942 CEST	54456	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.053359985 CEST	54456	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.053375959 CEST	443	54456	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.055879116 CEST	443	54453	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.055917978 CEST	443	54453	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.055974960 CEST	54453	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.055978060 CEST	443	54453	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.056091070 CEST	54453	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.056233883 CEST	54453	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.056256056 CEST	443	54453	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.056258917 CEST	54453	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.056267023 CEST	443	54453	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.058830023 CEST	54457	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.058875084 CEST	443	54457	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.058958054 CEST	54457	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.059199095 CEST	54457	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.059212923 CEST	443	54457	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.069374084 CEST	443	54454	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.070126057 CEST	443	54454	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.070200920 CEST	54454	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.070280075 CEST	54454	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.070301056 CEST	443	54454	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.074579000 CEST	54458	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.074635029 CEST	443	54458	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.074894905 CEST	54458	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.075217962 CEST	54458	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.075237989 CEST	443	54458	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.075337887 CEST	443	54452	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.075500965 CEST	443	54452	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.075560093 CEST	54452	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.075779915 CEST	54452	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.075800896 CEST	443	54452	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.075814962 CEST	54452	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.075822115 CEST	443	54452	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.080173016 CEST	54459	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.080265999 CEST	443	54459	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.080343962 CEST	54459	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.080538034 CEST	54459	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.080590963 CEST	443	54459	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.802624941 CEST	443	54455	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.803179979 CEST	54455	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.803215981 CEST	443	54455	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.803657055 CEST	54455	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.803663969 CEST	443	54455	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.815861940 CEST	443	54456	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.816411972 CEST	443	54457	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.816426039 CEST	54456	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.816490889 CEST	443	54456	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.816673040 CEST	54456	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.816687107 CEST	443	54456	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.816859961 CEST	54457	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.816926956 CEST	443	54457	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.817152977 CEST	54457	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.817167997 CEST	443	54457	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.826666117 CEST	443	54458	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.827081919 CEST	54458	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.827114105 CEST	443	54458	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.827426910 CEST	54458	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.827439070 CEST	443	54458	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.833960056 CEST	443	54459	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.834434032 CEST	54459	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.834479094 CEST	443	54459	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.834713936 CEST	54459	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.834721088 CEST	443	54459	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.939196110 CEST	443	54455	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.939300060 CEST	443	54455	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.939383030 CEST	54455	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.939807892 CEST	54455	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.939835072 CEST	443	54455	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.939855099 CEST	54455	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.939863920 CEST	443	54455	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.944192886 CEST	54460	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.944242001 CEST	443	54460	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.944307089 CEST	54460	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.944586039 CEST	54460	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.944603920 CEST	443	54460	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.953542948 CEST	443	54456	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.953654051 CEST	443	54456	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.954032898 CEST	443	54457	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.954050064 CEST	54456	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.954124928 CEST	443	54457	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.954237938 CEST	443	54457	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.954297066 CEST	54457	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.954426050 CEST	54457	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.954459906 CEST	443	54457	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.954535007 CEST	54457	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.954550982 CEST	443	54457	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.956062078 CEST	54456	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.956062078 CEST	54456	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.956108093 CEST	443	54456	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.956136942 CEST	443	54456	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.959866047 CEST	54461	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.959954023 CEST	443	54461	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.960041046 CEST	54461	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.960267067 CEST	54461	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.960303068 CEST	443	54461	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.961853027 CEST	54462	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.961877108 CEST	443	54462	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.961997032 CEST	54462	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.962244987 CEST	54462	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.962255001 CEST	443	54462	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.963509083 CEST	443	54458	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.963588953 CEST	443	54458	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.963797092 CEST	54458	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.963992119 CEST	54458	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.963999987 CEST	443	54458	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.964015007 CEST	54458	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.964020967 CEST	443	54458	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.967940092 CEST	54463	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.967972994 CEST	443	54463	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.968103886 CEST	54463	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.968245029 CEST	54463	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.968266964 CEST	443	54463	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.970525026 CEST	443	54459	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.970679998 CEST	443	54459	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.970782995 CEST	54459	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.970794916 CEST	443	54459	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.970901966 CEST	54459	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.970931053 CEST	443	54459	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.970957994 CEST	54459	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.970957994 CEST	54459	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.970973969 CEST	443	54459	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.970993042 CEST	443	54459	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.973820925 CEST	54464	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.973862886 CEST	443	54464	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:51.974358082 CEST	54464	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.974575996 CEST	54464	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:51.974601984 CEST	443	54464	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.702636957 CEST	443	54460	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.712193012 CEST	443	54461	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.714020967 CEST	443	54463	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.720633984 CEST	443	54462	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.725538969 CEST	443	54464	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.726574898 CEST	54460	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.726603985 CEST	443	54460	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.728303909 CEST	54460	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.728312016 CEST	443	54460	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.729098082 CEST	54464	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.729137897 CEST	443	54464	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.729995966 CEST	54464	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.730021954 CEST	443	54464	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.730700016 CEST	54462	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.730715036 CEST	443	54462	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.731214046 CEST	54462	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.731218100 CEST	443	54462	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.732176065 CEST	54461	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.732188940 CEST	443	54461	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.733237982 CEST	54461	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.733244896 CEST	443	54461	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.734091997 CEST	54463	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.734101057 CEST	443	54463	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.734550953 CEST	54463	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.734556913 CEST	443	54463	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.882603884 CEST	443	54463	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.882725000 CEST	443	54463	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.882774115 CEST	54463	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.882813931 CEST	443	54463	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.882828951 CEST	443	54464	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.882848024 CEST	443	54463	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.882889986 CEST	443	54464	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.882900000 CEST	54463	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.882934093 CEST	54464	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.882975101 CEST	54463	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.882993937 CEST	443	54463	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.883006096 CEST	54463	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.883013010 CEST	443	54463	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.883209944 CEST	54464	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.883215904 CEST	443	54464	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.883229971 CEST	54464	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.883234978 CEST	443	54464	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.883646965 CEST	443	54460	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.883734941 CEST	443	54460	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.883780003 CEST	54460	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.883972883 CEST	54460	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.883994102 CEST	443	54460	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.883996964 CEST	443	54461	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.884048939 CEST	54460	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.884061098 CEST	443	54460	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.884068966 CEST	443	54462	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.884156942 CEST	443	54461	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.884202957 CEST	54461	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.884228945 CEST	443	54462	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.884270906 CEST	54462	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.885124922 CEST	54461	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.885143995 CEST	443	54461	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.885159016 CEST	54461	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.885165930 CEST	443	54461	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.885533094 CEST	54462	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.885545015 CEST	443	54462	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.885560036 CEST	54462	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.885565042 CEST	443	54462	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.888215065 CEST	54466	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.888252974 CEST	443	54466	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.888323069 CEST	54466	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.888410091 CEST	54467	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.888439894 CEST	443	54467	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.888488054 CEST	54467	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.888938904 CEST	54468	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.888979912 CEST	443	54468	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.889008045 CEST	54469	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.889038086 CEST	54468	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.889101028 CEST	443	54469	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.889167070 CEST	54469	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.889415026 CEST	54467	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.889432907 CEST	443	54467	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.889486074 CEST	54469	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.889523029 CEST	443	54469	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.889529943 CEST	54466	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.889545918 CEST	443	54466	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.889936924 CEST	54468	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.889955997 CEST	443	54468	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.890180111 CEST	54470	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.890189886 CEST	443	54470	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:52.890244961 CEST	54470	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.890342951 CEST	54470	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:52.890353918 CEST	443	54470	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.637757063 CEST	443	54468	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.638847113 CEST	54468	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.638891935 CEST	443	54468	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.639833927 CEST	54468	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.639843941 CEST	443	54468	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.645808935 CEST	443	54467	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.646565914 CEST	54467	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.646625996 CEST	443	54467	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.646991968 CEST	443	54466	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.647531033 CEST	54467	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.647546053 CEST	443	54467	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.648042917 CEST	54466	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.648119926 CEST	443	54466	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.648658991 CEST	54466	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.648673058 CEST	443	54466	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.653693914 CEST	443	54470	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.654253006 CEST	54470	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.654350996 CEST	443	54470	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.655121088 CEST	54470	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.655138969 CEST	443	54470	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.663474083 CEST	443	54469	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.664167881 CEST	54469	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.664227962 CEST	443	54469	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.664875031 CEST	54469	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.664889097 CEST	443	54469	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.680979967 CEST	443	54413	216.58.206.68	192.168.2.4
Oct 23, 2024 15:38:53.681129932 CEST	443	54413	216.58.206.68	192.168.2.4
Oct 23, 2024 15:38:53.681181908 CEST	54413	443	192.168.2.4	216.58.206.68
Oct 23, 2024 15:38:53.773581982 CEST	443	54468	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.773731947 CEST	443	54468	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.773807049 CEST	54468	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.779169083 CEST	54468	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.779221058 CEST	443	54468	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.779254913 CEST	54468	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.779270887 CEST	443	54468	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.783332109 CEST	443	54467	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.783456087 CEST	443	54466	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.783643007 CEST	443	54467	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.783699036 CEST	54467	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.784074068 CEST	443	54466	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.784142017 CEST	54466	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.792378902 CEST	443	54470	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.792464972 CEST	443	54470	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.792610884 CEST	54470	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.804088116 CEST	443	54469	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.804166079 CEST	443	54469	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.804285049 CEST	443	54469	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.804368019 CEST	54469	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.804436922 CEST	54469	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.815284967 CEST	54466	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.815284967 CEST	54466	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.815357924 CEST	443	54466	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.815386057 CEST	443	54466	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.868133068 CEST	54470	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.868197918 CEST	443	54470	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.868218899 CEST	54470	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.868227959 CEST	443	54470	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.868335009 CEST	54469	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.868335962 CEST	54469	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.868418932 CEST	443	54469	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.868454933 CEST	443	54469	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.879009008 CEST	54467	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.879076958 CEST	443	54467	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.879100084 CEST	54467	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.879111052 CEST	443	54467	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.886827946 CEST	54471	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.886933088 CEST	443	54471	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.887036085 CEST	54471	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.887772083 CEST	54471	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.887804031 CEST	443	54471	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.890356064 CEST	54472	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.890470982 CEST	443	54472	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.890548944 CEST	54472	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.891596079 CEST	54472	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.891632080 CEST	443	54472	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.894149065 CEST	54473	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.894207001 CEST	443	54473	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.894295931 CEST	54473	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.894479036 CEST	54473	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.894498110 CEST	443	54473	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.895823956 CEST	54474	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.895858049 CEST	443	54474	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.895941973 CEST	54474	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.896640062 CEST	54475	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.896678925 CEST	443	54475	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.896889925 CEST	54475	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.897043943 CEST	54474	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.897070885 CEST	443	54474	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:53.897222042 CEST	54475	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:53.897243023 CEST	443	54475	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.643712997 CEST	443	54473	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.644335985 CEST	54473	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.644340992 CEST	443	54472	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.644368887 CEST	443	54473	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.645334959 CEST	54473	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.645348072 CEST	443	54473	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.645947933 CEST	54472	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.645970106 CEST	443	54472	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.646465063 CEST	54472	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.646471977 CEST	443	54472	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.654328108 CEST	443	54475	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.654761076 CEST	54475	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.654778004 CEST	443	54475	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.655683041 CEST	54475	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.655688047 CEST	443	54475	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.658397913 CEST	443	54471	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.659157991 CEST	54471	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.659228086 CEST	443	54471	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.660052061 CEST	54471	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.660068989 CEST	443	54471	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.669114113 CEST	443	54474	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.669580936 CEST	54474	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.669591904 CEST	443	54474	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.670469046 CEST	54474	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.670474052 CEST	443	54474	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.779618025 CEST	443	54473	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.779726028 CEST	443	54473	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.779784918 CEST	54473	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.779999018 CEST	54473	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.779999018 CEST	54473	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.780023098 CEST	443	54473	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.780035973 CEST	443	54473	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.780448914 CEST	443	54472	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.780553102 CEST	443	54472	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.780616999 CEST	54472	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.780771971 CEST	54472	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.780790091 CEST	443	54472	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.780802965 CEST	54472	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.780811071 CEST	443	54472	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.783534050 CEST	54476	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.783591986 CEST	54477	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.783600092 CEST	443	54476	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.783639908 CEST	443	54477	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.783667088 CEST	54476	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.783795118 CEST	54477	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.783857107 CEST	54476	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.783871889 CEST	443	54476	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.783963919 CEST	54477	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.783977032 CEST	443	54477	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.791974068 CEST	443	54475	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.792010069 CEST	443	54475	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.792064905 CEST	443	54475	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.792113066 CEST	54475	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.792215109 CEST	54475	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.792231083 CEST	443	54475	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.792246103 CEST	54475	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.792253017 CEST	443	54475	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.794766903 CEST	54478	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.794812918 CEST	443	54478	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.794878006 CEST	54478	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.794975042 CEST	54478	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.794985056 CEST	443	54478	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.796713114 CEST	443	54471	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.796811104 CEST	443	54471	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.796860933 CEST	54471	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.797017097 CEST	54471	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.797030926 CEST	443	54471	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.797041893 CEST	54471	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.797046900 CEST	443	54471	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.799336910 CEST	54479	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.799365044 CEST	443	54479	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.799514055 CEST	54479	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.799514055 CEST	54479	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.799546957 CEST	443	54479	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.807873011 CEST	443	54474	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.808068991 CEST	443	54474	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.808130980 CEST	54474	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.808178902 CEST	54474	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.808190107 CEST	443	54474	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.808223009 CEST	54474	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.808229923 CEST	443	54474	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.810292006 CEST	54480	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.810328960 CEST	443	54480	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:54.810636044 CEST	54480	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.810636997 CEST	54480	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:54.810673952 CEST	443	54480	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.096831083 CEST	54413	443	192.168.2.4	216.58.206.68
Oct 23, 2024 15:38:55.096904993 CEST	443	54413	216.58.206.68	192.168.2.4
Oct 23, 2024 15:38:55.523679018 CEST	443	54476	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.524321079 CEST	54476	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.524414062 CEST	443	54476	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.524950981 CEST	54476	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.524966002 CEST	443	54476	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.531162977 CEST	443	54477	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.532105923 CEST	54477	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.532105923 CEST	54477	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.532121897 CEST	443	54477	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.532143116 CEST	443	54477	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.543447971 CEST	443	54478	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.543889999 CEST	54478	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.543926954 CEST	443	54478	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.544306993 CEST	54478	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.544320107 CEST	443	54478	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.569441080 CEST	443	54479	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.570228100 CEST	54479	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.570255041 CEST	443	54479	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.570911884 CEST	54479	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.570919991 CEST	443	54479	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.578061104 CEST	443	54480	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.578649998 CEST	54480	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.578686953 CEST	443	54480	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.579170942 CEST	54480	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.579190969 CEST	443	54480	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.657653093 CEST	443	54476	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.657763958 CEST	443	54476	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.657830000 CEST	54476	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.658046961 CEST	54476	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.658071041 CEST	443	54476	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.658087969 CEST	54476	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.658097029 CEST	443	54476	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.661840916 CEST	54481	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.661880970 CEST	443	54481	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.661951065 CEST	54481	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.662147999 CEST	54481	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.662163019 CEST	443	54481	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.665370941 CEST	443	54477	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.665621042 CEST	443	54477	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.665699959 CEST	54477	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.665760040 CEST	54477	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.665760040 CEST	54477	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.665779114 CEST	443	54477	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.665787935 CEST	443	54477	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.668435097 CEST	54482	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.668488979 CEST	443	54482	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.668554068 CEST	54482	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.668715000 CEST	54482	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.668754101 CEST	443	54482	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.679871082 CEST	443	54478	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.679897070 CEST	443	54478	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.679960966 CEST	54478	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.679970980 CEST	443	54478	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.680022001 CEST	54478	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.680179119 CEST	54478	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.680200100 CEST	443	54478	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.680217028 CEST	54478	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.680223942 CEST	443	54478	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.682526112 CEST	54483	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.682552099 CEST	443	54483	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.682614088 CEST	54483	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.682804108 CEST	54483	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.682818890 CEST	443	54483	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.715368986 CEST	443	54480	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.715517998 CEST	443	54480	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.715595961 CEST	54480	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.715651035 CEST	443	54480	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.715687037 CEST	443	54480	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.715748072 CEST	54480	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.715794086 CEST	443	54480	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.715823889 CEST	54480	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.715825081 CEST	54480	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.715845108 CEST	443	54480	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.715864897 CEST	443	54480	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.716087103 CEST	443	54479	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.716180086 CEST	443	54479	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.716226101 CEST	54479	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.716249943 CEST	443	54479	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.716291904 CEST	443	54479	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.716351032 CEST	54479	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.716403961 CEST	54479	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.716418028 CEST	443	54479	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.719189882 CEST	54484	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.719214916 CEST	443	54484	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.719589949 CEST	54484	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.719774008 CEST	54484	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.719788074 CEST	443	54484	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.719930887 CEST	54485	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.719978094 CEST	443	54485	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:55.720046043 CEST	54485	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.720165968 CEST	54485	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:55.720182896 CEST	443	54485	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.441241026 CEST	443	54482	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.441839933 CEST	54482	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.441885948 CEST	443	54482	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.442490101 CEST	54482	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.442498922 CEST	443	54482	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.449589014 CEST	443	54483	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.449965954 CEST	54483	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.449987888 CEST	443	54483	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.450474977 CEST	54483	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.450479984 CEST	443	54483	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.488732100 CEST	443	54485	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.489177942 CEST	54485	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.489262104 CEST	443	54485	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.489720106 CEST	54485	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.489737034 CEST	443	54485	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.490719080 CEST	443	54484	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.491096020 CEST	54484	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.491111994 CEST	443	54484	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.491539955 CEST	54484	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.491548061 CEST	443	54484	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.579418898 CEST	443	54482	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.579523087 CEST	443	54482	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.579582930 CEST	54482	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.579618931 CEST	443	54482	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.579648018 CEST	443	54482	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.579688072 CEST	54482	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.579767942 CEST	54482	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.579786062 CEST	443	54482	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.579799891 CEST	54482	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.579807043 CEST	443	54482	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.582761049 CEST	54486	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.582802057 CEST	443	54486	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.582937956 CEST	54486	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.583072901 CEST	54486	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.583081961 CEST	443	54486	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.589167118 CEST	443	54483	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.589262962 CEST	443	54483	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.589334011 CEST	54483	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.589385033 CEST	54483	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.589418888 CEST	443	54483	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.589447021 CEST	54483	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.589462996 CEST	443	54483	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.591855049 CEST	54487	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.591947079 CEST	443	54487	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.592022896 CEST	54487	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.592166901 CEST	54487	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.592185974 CEST	443	54487	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.624579906 CEST	443	54485	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.624650002 CEST	443	54485	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.624735117 CEST	54485	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.624771118 CEST	443	54485	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.624804974 CEST	443	54485	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.624866962 CEST	54485	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.624948025 CEST	54485	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.624977112 CEST	443	54485	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.625005007 CEST	54485	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.625019073 CEST	443	54485	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.626748085 CEST	443	54484	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.626816034 CEST	443	54484	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.626928091 CEST	443	54484	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.626974106 CEST	54484	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.626974106 CEST	54484	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.627049923 CEST	54484	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.627049923 CEST	54484	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.627060890 CEST	443	54484	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.627067089 CEST	443	54484	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.627685070 CEST	54488	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.627774954 CEST	443	54488	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.627866030 CEST	54488	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.628015041 CEST	54488	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.628038883 CEST	443	54488	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.629172087 CEST	54489	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.629251957 CEST	443	54489	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.629340887 CEST	54489	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.629472971 CEST	54489	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.629498959 CEST	443	54489	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.766127110 CEST	443	54481	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.766715050 CEST	54481	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.766733885 CEST	443	54481	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.767263889 CEST	54481	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.767270088 CEST	443	54481	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.908207893 CEST	443	54481	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.908426046 CEST	443	54481	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.908488989 CEST	54481	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.908591032 CEST	54481	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.908622980 CEST	443	54481	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.908649921 CEST	54481	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.908665895 CEST	443	54481	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.912211895 CEST	54490	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.912311077 CEST	443	54490	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:56.912511110 CEST	54490	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.912797928 CEST	54490	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:56.912836075 CEST	443	54490	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.342339993 CEST	443	54486	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.343008041 CEST	54486	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.343034029 CEST	443	54486	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.343434095 CEST	54486	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.343440056 CEST	443	54486	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.348645926 CEST	443	54487	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.349008083 CEST	54487	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.349045992 CEST	443	54487	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.349414110 CEST	54487	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.349421024 CEST	443	54487	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.388473034 CEST	443	54488	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.388866901 CEST	54488	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.388904095 CEST	443	54488	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.389255047 CEST	54488	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.389265060 CEST	443	54488	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.411556005 CEST	443	54489	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.411953926 CEST	54489	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.411998987 CEST	443	54489	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.412358999 CEST	54489	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.412370920 CEST	443	54489	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.480098009 CEST	443	54486	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.480175972 CEST	443	54486	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.480272055 CEST	54486	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.480283976 CEST	443	54486	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.480321884 CEST	443	54486	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.480379105 CEST	54486	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.480468988 CEST	54486	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.480468988 CEST	54486	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.480485916 CEST	443	54486	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.480493069 CEST	443	54486	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.483341932 CEST	54491	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.483408928 CEST	443	54491	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.483484983 CEST	54491	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.483642101 CEST	54491	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.483658075 CEST	443	54491	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.487206936 CEST	443	54487	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.487271070 CEST	443	54487	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.487308979 CEST	54487	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.487413883 CEST	54487	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.487440109 CEST	443	54487	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.487456083 CEST	54487	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.487462997 CEST	443	54487	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.489691019 CEST	54492	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.489731073 CEST	443	54492	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.489978075 CEST	54492	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.490115881 CEST	54492	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.490129948 CEST	443	54492	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.533219099 CEST	443	54488	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.533307076 CEST	443	54488	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.533365011 CEST	54488	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.533452988 CEST	54488	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.533474922 CEST	443	54488	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.533489943 CEST	54488	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.533498049 CEST	443	54488	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.535865068 CEST	54493	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.535948992 CEST	443	54493	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.536024094 CEST	54493	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.536153078 CEST	54493	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.536176920 CEST	443	54493	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.548712969 CEST	443	54489	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.548878908 CEST	443	54489	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.548949957 CEST	54489	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.549040079 CEST	54489	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.549040079 CEST	54489	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.549072027 CEST	443	54489	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.549098015 CEST	443	54489	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.551562071 CEST	54494	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.551651001 CEST	443	54494	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.551749945 CEST	54494	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.551881075 CEST	54494	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.551915884 CEST	443	54494	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.649658918 CEST	443	54490	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.650307894 CEST	54490	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.650374889 CEST	443	54490	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.650640011 CEST	54490	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.650655985 CEST	443	54490	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.784312010 CEST	443	54490	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.784344912 CEST	443	54490	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.784394026 CEST	443	54490	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.784393072 CEST	54490	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.784432888 CEST	54490	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.784701109 CEST	54490	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.784725904 CEST	443	54490	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.784742117 CEST	54490	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.784749985 CEST	443	54490	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.788120031 CEST	54495	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.788166046 CEST	443	54495	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:57.788255930 CEST	54495	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.788419962 CEST	54495	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:57.788434029 CEST	443	54495	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.257966995 CEST	443	54492	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.258862972 CEST	54492	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.258927107 CEST	443	54492	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.259602070 CEST	54492	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.259607077 CEST	443	54492	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.285897970 CEST	443	54491	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.286555052 CEST	54491	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.286627054 CEST	443	54491	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.287051916 CEST	54491	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.287070990 CEST	443	54491	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.294450045 CEST	443	54493	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.295190096 CEST	54493	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.295250893 CEST	443	54493	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.295736074 CEST	54493	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.295751095 CEST	443	54493	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.310684919 CEST	443	54494	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.311184883 CEST	54494	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.311247110 CEST	443	54494	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.311659098 CEST	54494	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.311672926 CEST	443	54494	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.395837069 CEST	443	54492	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.395864964 CEST	443	54492	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.395912886 CEST	443	54492	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.395963907 CEST	54492	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.395963907 CEST	54492	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.396286011 CEST	54492	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.396330118 CEST	443	54492	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.396357059 CEST	54492	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.396373034 CEST	443	54492	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.400065899 CEST	54496	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.400110960 CEST	443	54496	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.400770903 CEST	54496	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.400934935 CEST	54496	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.400952101 CEST	443	54496	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.423669100 CEST	443	54491	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.423871040 CEST	443	54491	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.424009085 CEST	54491	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.424171925 CEST	54491	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.424207926 CEST	443	54491	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.424236059 CEST	54491	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.424252987 CEST	443	54491	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.428014994 CEST	54497	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.428056955 CEST	443	54497	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.428119898 CEST	54497	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.428297997 CEST	54497	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.428316116 CEST	443	54497	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.430826902 CEST	443	54493	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.430999041 CEST	443	54493	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.431062937 CEST	54493	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.431232929 CEST	54493	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.431253910 CEST	443	54493	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.431268930 CEST	54493	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.431276083 CEST	443	54493	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.434360027 CEST	54498	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.434410095 CEST	443	54498	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.434468031 CEST	54498	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.434705019 CEST	54498	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.434721947 CEST	443	54498	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.447732925 CEST	443	54494	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.447798014 CEST	443	54494	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.447863102 CEST	54494	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.447870970 CEST	443	54494	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.447921038 CEST	54494	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.448163986 CEST	54494	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.448182106 CEST	443	54494	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.448191881 CEST	54494	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.448196888 CEST	443	54494	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.451103926 CEST	54499	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.451132059 CEST	443	54499	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.451195002 CEST	54499	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.451308012 CEST	54499	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.451329947 CEST	443	54499	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.550404072 CEST	443	54495	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.551079035 CEST	54495	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.551146030 CEST	443	54495	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:58.551640987 CEST	54495	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:58.551696062 CEST	443	54495	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.714737892 CEST	443	54495	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.714803934 CEST	443	54495	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.714904070 CEST	54495	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:59.715204954 CEST	54495	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:59.715229034 CEST	443	54495	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.715262890 CEST	54495	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:59.715270996 CEST	443	54495	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.718755007 CEST	54500	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:59.718811989 CEST	443	54500	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.718997002 CEST	54500	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:59.719132900 CEST	54500	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:59.719162941 CEST	443	54500	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.854784012 CEST	443	54498	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.855355024 CEST	54498	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:59.855382919 CEST	443	54498	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.855885029 CEST	54498	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:59.855892897 CEST	443	54498	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.856185913 CEST	443	54496	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.856586933 CEST	54496	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:59.856612921 CEST	443	54496	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.857196093 CEST	54496	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:59.857206106 CEST	443	54496	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.860754967 CEST	443	54497	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.861202002 CEST	54497	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:59.861215115 CEST	443	54497	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.861624956 CEST	54497	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:59.861629963 CEST	443	54497	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.863549948 CEST	443	54499	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.863877058 CEST	54499	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:59.863884926 CEST	443	54499	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.864382982 CEST	54499	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:59.864387989 CEST	443	54499	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.990082979 CEST	443	54498	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.990166903 CEST	443	54498	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.990370989 CEST	54498	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:59.990505934 CEST	54498	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:59.990526915 CEST	443	54498	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.990542889 CEST	54498	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:59.990550995 CEST	443	54498	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.990842104 CEST	443	54496	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.991050959 CEST	443	54496	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.991110086 CEST	54496	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:59.991347075 CEST	54496	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:59.991354942 CEST	443	54496	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.991380930 CEST	54496	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:59.991384983 CEST	443	54496	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.993758917 CEST	54501	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:59.993804932 CEST	443	54501	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.993880987 CEST	54501	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:59.994029045 CEST	54501	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:59.994044065 CEST	443	54501	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.995110989 CEST	54502	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:59.995141983 CEST	443	54502	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.995253086 CEST	54502	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:59.995393038 CEST	54502	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:59.995407104 CEST	443	54502	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.996982098 CEST	443	54497	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.997189045 CEST	443	54497	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.997307062 CEST	54497	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:59.997370005 CEST	54497	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:59.997386932 CEST	443	54497	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.997400045 CEST	54497	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:59.997407913 CEST	443	54497	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.999474049 CEST	54503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:59.999488115 CEST	443	54503	13.107.253.72	192.168.2.4
Oct 23, 2024 15:38:59.999543905 CEST	54503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:59.999666929 CEST	54503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:38:59.999680996 CEST	443	54503	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.002428055 CEST	443	54499	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.003000975 CEST	443	54499	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.003071070 CEST	54499	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.003139019 CEST	54499	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.003139019 CEST	54499	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.003148079 CEST	443	54499	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.003158092 CEST	443	54499	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.005179882 CEST	54504	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.005217075 CEST	443	54504	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.005393028 CEST	54504	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.005515099 CEST	54504	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.005522966 CEST	443	54504	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.503349066 CEST	443	54500	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.504036903 CEST	54500	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.504060030 CEST	443	54500	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.504786968 CEST	54500	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.504792929 CEST	443	54500	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.640856028 CEST	443	54500	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.640887022 CEST	443	54500	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.640938997 CEST	443	54500	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.640940905 CEST	54500	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.640988111 CEST	54500	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.642024994 CEST	54500	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.642024994 CEST	54500	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.642049074 CEST	443	54500	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.642060995 CEST	443	54500	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.645128012 CEST	54505	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.645226002 CEST	443	54505	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.645312071 CEST	54505	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.645459890 CEST	54505	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.645499945 CEST	443	54505	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.769920111 CEST	443	54502	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.770055056 CEST	443	54503	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.770744085 CEST	54503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.770778894 CEST	54502	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.770793915 CEST	443	54502	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.770811081 CEST	443	54503	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.771261930 CEST	54503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.771277905 CEST	443	54503	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.771307945 CEST	54502	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.771313906 CEST	443	54502	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.771349907 CEST	443	54501	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.771661043 CEST	54501	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.771676064 CEST	443	54501	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.772131920 CEST	54501	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.772141933 CEST	443	54501	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.781090021 CEST	443	54504	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.781651020 CEST	54504	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.781711102 CEST	443	54504	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.782751083 CEST	54504	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.782763958 CEST	443	54504	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.908365965 CEST	443	54503	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.908533096 CEST	443	54503	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.908628941 CEST	54503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.908899069 CEST	54503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.908899069 CEST	54503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.908948898 CEST	443	54503	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.908978939 CEST	443	54503	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.909737110 CEST	443	54501	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.909957886 CEST	443	54501	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.910062075 CEST	54501	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.910094976 CEST	54501	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.910106897 CEST	443	54501	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.910146952 CEST	54501	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.910161972 CEST	443	54501	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.913368940 CEST	54506	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.913443089 CEST	443	54506	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.913575888 CEST	54506	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.913779020 CEST	54507	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.913866997 CEST	443	54507	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.913960934 CEST	54507	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.914011002 CEST	54506	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.914041996 CEST	443	54506	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.914097071 CEST	54507	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.914115906 CEST	443	54507	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.922657013 CEST	443	54504	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.922808886 CEST	443	54504	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.922899008 CEST	54504	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.922919989 CEST	443	54504	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.922950029 CEST	443	54504	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.923027039 CEST	54504	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.923063040 CEST	443	54504	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.923093081 CEST	54504	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.923093081 CEST	54504	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.923111916 CEST	443	54504	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.923131943 CEST	443	54504	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.925591946 CEST	54508	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.925669909 CEST	443	54508	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:00.925761938 CEST	54508	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.925903082 CEST	54508	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:00.925931931 CEST	443	54508	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:01.048892975 CEST	443	54502	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:01.048923969 CEST	443	54502	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:01.048985004 CEST	443	54502	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:01.049000978 CEST	54502	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:01.049084902 CEST	54502	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:01.049367905 CEST	54502	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:01.049367905 CEST	54502	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:01.049386024 CEST	443	54502	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:01.049395084 CEST	443	54502	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:01.052556992 CEST	54509	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:01.052669048 CEST	443	54509	13.107.253.72	192.168.2.4
Oct 23, 2024 15:39:01.052779913 CEST	54509	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:01.052969933 CEST	54509	443	192.168.2.4	13.107.253.72
Oct 23, 2024 15:39:01.053002119 CEST	443	54509	13.107.253.72	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 23, 2024 15:37:38.443692923 CEST	53	57002	1.1.1.1	192.168.2.4
Oct 23, 2024 15:37:38.497011900 CEST	53	53381	1.1.1.1	192.168.2.4
Oct 23, 2024 15:37:39.726634026 CEST	53	63117	1.1.1.1	192.168.2.4
Oct 23, 2024 15:37:40.496392012 CEST	64372	53	192.168.2.4	1.1.1.1
Oct 23, 2024 15:37:40.504028082 CEST	61166	53	192.168.2.4	1.1.1.1
Oct 23, 2024 15:37:40.511436939 CEST	53	64372	1.1.1.1	192.168.2.4
Oct 23, 2024 15:37:40.520876884 CEST	53	61166	1.1.1.1	192.168.2.4
Oct 23, 2024 15:37:42.282931089 CEST	52829	53	192.168.2.4	1.1.1.1
Oct 23, 2024 15:37:42.283442974 CEST	59134	53	192.168.2.4	1.1.1.1
Oct 23, 2024 15:37:42.291198969 CEST	53	52829	1.1.1.1	192.168.2.4
Oct 23, 2024 15:37:42.292802095 CEST	53	59134	1.1.1.1	192.168.2.4
Oct 23, 2024 15:37:42.673722029 CEST	49522	53	192.168.2.4	1.1.1.1
Oct 23, 2024 15:37:42.673779964 CEST	56047	53	192.168.2.4	1.1.1.1
Oct 23, 2024 15:37:42.682024956 CEST	53	56047	1.1.1.1	192.168.2.4
Oct 23, 2024 15:37:42.682071924 CEST	53	49522	1.1.1.1	192.168.2.4
Oct 23, 2024 15:37:47.130440950 CEST	138	138	192.168.2.4	192.168.2.255
Oct 23, 2024 15:37:56.792740107 CEST	53	49501	1.1.1.1	192.168.2.4
Oct 23, 2024 15:38:15.570254087 CEST	53	65424	1.1.1.1	192.168.2.4
Oct 23, 2024 15:38:38.203676939 CEST	53	55338	1.1.1.1	192.168.2.4
Oct 23, 2024 15:38:38.326289892 CEST	53	63645	1.1.1.1	192.168.2.4
Oct 23, 2024 15:38:40.723217964 CEST	53	49442	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 23, 2024 15:37:40.496392012 CEST	192.168.2.4	1.1.1.1	0xe126	Standard query (0)	re.e-sharedonedrivefile.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:37:40.504028082 CEST	192.168.2.4	1.1.1.1	0xb0ce	Standard query (0)	re.e-sharedonedrivefile.com	65	IN (0x0001)	false
Oct 23, 2024 15:37:42.282931089 CEST	192.168.2.4	1.1.1.1	0x5425	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:37:42.283442974 CEST	192.168.2.4	1.1.1.1	0xc5d9	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Oct 23, 2024 15:37:42.673722029 CEST	192.168.2.4	1.1.1.1	0x4630	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:37:42.673779964 CEST	192.168.2.4	1.1.1.1	0x9035	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 23, 2024 15:37:40.511436939 CEST	1.1.1.1	192.168.2.4	0xe126	No error (0)	re.e-sharedonedrivefile.com		172.67.149.171	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:37:40.511436939 CEST	1.1.1.1	192.168.2.4	0xe126	No error (0)	re.e-sharedonedrivefile.com		104.21.29.193	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:37:40.520876884 CEST	1.1.1.1	192.168.2.4	0xb0ce	No error (0)	re.e-sharedonedrivefile.com			65	IN (0x0001)	false
Oct 23, 2024 15:37:42.291198969 CEST	1.1.1.1	192.168.2.4	0x5425	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:37:42.682024956 CEST	1.1.1.1	192.168.2.4	0x9035	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 23, 2024 15:37:42.682071924 CEST	1.1.1.1	192.168.2.4	0x4630	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:38:24.673185110 CEST	1.1.1.1	192.168.2.4	0x748a	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 15:38:24.673185110 CEST	1.1.1.1	192.168.2.4	0x748a	No error (0)	dual.s-part-0044.t-0009.fb-t-msedge.net	s-part-0044.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 15:38:24.673185110 CEST	1.1.1.1	192.168.2.4	0x748a	No error (0)	s-part-0044.t-0009.fb-t-msedge.net		13.107.253.72	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

re.e-sharedonedrivefile.com

https:

a.nel.cloudflare.com

fs.microsoft.com

slscr.update.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49740	172.67.149.171	443	4996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:37:41 UTC	677	OUT	GET /skjashd HTTP/1.1 Host: re.e-sharedonedrivefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 13:37:42 UTC	791	IN	HTTP/1.1 302 Found Date: Wed, 23 Oct 2024 13:37:42 GMT Content-Length: 0 Connection: close Location: https://re.e-sharedonedrivefile.com/33lrrtevpnn26pizbvfv99vlfq7v4z2ur7 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zHpBb0YkMZ8f3uoWUki3XYNrDV3DPQp3Ok6kOsUn1f1sa9a7bBfY%2Flxx1IMa5LaIhZw7V%2FXF2gYPEKW%2BYqUCwwJZcTtAWH%2BxGlcmp3ekyCd37lqnMDlJSe3DDIPOTvKJk5QB70nUGyXDCn39OOo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d721f8de9cf2d3f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1515&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2864&recv_bytes=1255&delivery_rate=1905263&cwnd=251&unsent_bytes=0&cid=23a1b683bb62fcf7&ts=369&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	172.67.149.171	443	4996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:37:42 UTC	704	OUT	GET /33lrrtevpnn26pizbvfv99vlfq7v4z2ur7 HTTP/1.1 Host: re.e-sharedonedrivefile.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 13:37:42 UTC	751	IN	HTTP/1.1 404 Not Found Date: Wed, 23 Oct 2024 13:37:42 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g%2ByfNLoCwfJzcLifv%2Bm%2BnLZdZkAMLVMBXrBJuzNgp%2B23kekPIUxJwCDgHLyYmownGSkaNHR4de3aPEYxNjiMlO3%2F5Q1FpvcJlqjR96FkP2UqdqMJ1X3M5vDVpf7Sz1RrDrO17ofC%2BRTWpa7SmLk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d721f8ecf002cb2-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1519&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2864&recv_bytes=1282&delivery_rate=1873221&cwnd=251&unsent_bytes=0&cid=e68934b535141665&ts=528&x=0"
2024-10-23 13:37:42 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 55 52 4c 20 45 78 70 69 72 65 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 66 69 6c 65 20 55 52 4c 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 65 78 70 69 72 65 64 20 6f 72 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 3c 2f 70 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 80<html><body><h1>URL Expired</h1><p>The file URL you requested has expired or does not exist. Please try again.</p></body></html>
2024-10-23 13:37:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	35.190.80.1	443	4996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:37:43 UTC	570	OUT	OPTIONS /report/v4?s=g%2ByfNLoCwfJzcLifv%2Bm%2BnLZdZkAMLVMBXrBJuzNgp%2B23kekPIUxJwCDgHLyYmownGSkaNHR4de3aPEYxNjiMlO3%2F5Q1FpvcJlqjR96FkP2UqdqMJ1X3M5vDVpf7Sz1RrDrO17ofC%2BRTWpa7SmLk%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://re.e-sharedonedrivefile.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 13:37:43 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Wed, 23 Oct 2024 13:37:42 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49746	172.67.149.171	443	4996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:37:43 UTC	644	OUT	GET /favicon.ico HTTP/1.1 Host: re.e-sharedonedrivefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://re.e-sharedonedrivefile.com/33lrrtevpnn26pizbvfv99vlfq7v4z2ur7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 13:37:44 UTC	745	IN	HTTP/1.1 404 Not Found Date: Wed, 23 Oct 2024 13:37:43 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VHYzKwCdwE4MDVAKlc7iaBiKOb8moXGnZgTs4Uu%2Bx8n7DV6ysVuF77jM1v4LqEca2N7i5XHIvP4FJfcYCs4%2FUpuspUvbBZqUSKkEt5baaJIEgjZTzAoGaMErlNcU2QehndVS6yaRuOFBKx%2FmKqM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d721f99ac57e5ee-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1196&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2862&recv_bytes=1222&delivery_rate=2302066&cwnd=240&unsent_bytes=0&cid=917a526aeba5bb4e&ts=148&x=0"
2024-10-23 13:37:44 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 55 52 4c 20 45 78 70 69 72 65 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 66 69 6c 65 20 55 52 4c 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 65 78 70 69 72 65 64 20 6f 72 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 3c 2f 70 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 80<html><body><h1>URL Expired</h1><p>The file URL you requested has expired or does not exist. Please try again.</p></body></html>
2024-10-23 13:37:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49747	35.190.80.1	443	4996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:37:44 UTC	500	OUT	POST /report/v4?s=g%2ByfNLoCwfJzcLifv%2Bm%2BnLZdZkAMLVMBXrBJuzNgp%2B23kekPIUxJwCDgHLyYmownGSkaNHR4de3aPEYxNjiMlO3%2F5Q1FpvcJlqjR96FkP2UqdqMJ1X3M5vDVpf7Sz1RrDrO17ofC%2BRTWpa7SmLk%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 432 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 13:37:44 UTC	432	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 33 36 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 34 39 2e 31 37 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 72 65 2e 65 2d 73 68 61 72 65 64 6f 6e 65 64 Data Ascii: [{"age":0,"body":{"elapsed_time":136,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"172.67.149.171","status_code":404,"type":"http.error"},"type":"network-error","url":"https://re.e-sharedoned
2024-10-23 13:37:44 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Wed, 23 Oct 2024 13:37:43 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49745	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:37:44 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 13:37:44 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=97708 Date: Wed, 23 Oct 2024 13:37:44 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49749	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:37:45 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 13:37:45 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=97676 Date: Wed, 23 Oct 2024 13:37:45 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-23 13:37:45 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49748	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:37:45 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=aF7xOTxtBB7rrbL&MD=BhCForsw HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-23 13:37:45 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 47e71e47-8a2a-47f5-9a2c-534cc2be830f MS-RequestId: 704492bb-f862-430a-bd44-c20d8a4b1104 MS-CV: z1yYtzz2+k6pZOJ/.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 23 Oct 2024 13:37:45 GMT Connection: close Content-Length: 24490
2024-10-23 13:37:45 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-23 13:37:45 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49755	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:23 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=aF7xOTxtBB7rrbL&MD=BhCForsw HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-23 13:38:24 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: b77e07ce-befd-4050-8603-91562b01e036 MS-RequestId: 1f0745ae-30ad-41a3-b088-aff1982ed30f MS-CV: Lb6qEtkJsU24p6cN.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 23 Oct 2024 13:38:23 GMT Connection: close Content-Length: 30005
2024-10-23 13:38:24 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-23 13:38:24 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49756	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:25 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:25 UTC	540	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:25 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 21 Oct 2024 13:21:21 GMT ETag: "0x8DCF1D34132B902" x-ms-request-id: 84bcd95b-b01e-001e-1a38-240214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133825Z-r1755647c66xrxq4nv7upygh4s00000001tg000000004ynn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:25 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-23 13:38:25 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-23 13:38:26 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-23 13:38:26 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-23 13:38:26 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-23 13:38:26 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-23 13:38:26 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-23 13:38:26 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-23 13:38:26 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-23 13:38:26 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49758	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:26 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:26 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 77f74883-b01e-0001-1a50-2346e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133826Z-17fbfdc98bblptj7fr9s141cpc00000005sg000000006tvk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:27 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49759	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:26 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:27 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:26 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 394abe64-001e-0028-050b-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133826Z-r1755647c66dj7986akr8tvaw400000007q00000000000vm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:27 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49757	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:26 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:27 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:26 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 014e5f85-701e-006f-2b35-21afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133826Z-r1755647c66m4jttnz6nb8kzng00000006s0000000006x67 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:27 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49761	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:26 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:27 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:26 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: fdb61705-b01e-0001-2f09-2246e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133826Z-r1755647c66j878m0wkraqty3800000006tg00000000579n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:27 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49760	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:26 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:27 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133827Z-r1755647c66tmf6g4720xfpwpn00000008zg00000000811g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:27 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49762	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:27 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:27 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: e3ea90ed-d01e-0028-6059-237896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133827Z-17fbfdc98bbg2mc9qrpn009kgs00000005wg0000000062x8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:27 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49763	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:27 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:27 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: f6e64d82-401e-0029-2a5d-239b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133827Z-17fbfdc98bb9dlh7es9mrdw2qc00000005pg000000006bwd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:27 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49766	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:27 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:27 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: ad393351-301e-0099-6d59-236683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133827Z-17fbfdc98bbkw9phumvsc7yy8w00000005z00000000004u8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:27 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49764	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:27 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:27 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: a0191c6f-501e-0047-3c5d-23ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133827Z-17fbfdc98bbg2mc9qrpn009kgs00000005y0000000005e7v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:27 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49765	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:27 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:27 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: fbb8ce34-501e-0064-0cbd-201f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133827Z-r1755647c66tmf6g4720xfpwpn0000000930000000004vh2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:27 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49767	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:28 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:28 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: bac56044-101e-0079-505d-235913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133828Z-17fbfdc98bb94gkbvedtsa5ef400000005zg0000000024ar x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:28 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49768	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:28 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:28 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 13862abc-a01e-0053-5aa2-218603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133828Z-17fbfdc98bb6j78ntkx6e2fx4c00000005s0000000005fm3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:28 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49769	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:28 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:28 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: a48fb397-901e-008f-6356-2367a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133828Z-17fbfdc98bbwfg2nvhsr4h37pn00000005y0000000003ukm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:28 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49771	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:28 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:28 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 7de7ed35-901e-005b-7c14-222005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133828Z-r1755647c66k9st9tvd58z9dg800000008bg000000003peh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:28 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49770	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:28 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:28 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 6ca7d158-d01e-0014-15ac-21ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133828Z-r1755647c66tmf6g4720xfpwpn0000000930000000004vhn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:28 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49772	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:29 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:29 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: bb9292ef-d01e-00ad-5d35-21e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133829Z-r1755647c66f2zlraraf0y5hrs00000006u0000000004wwv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:29 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49774	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:29 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:29 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 0b49af96-c01e-0079-7092-1fe51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133829Z-r1755647c66c9glmgg3prd89mn000000088g000000006qfg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:29 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49773	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:29 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:29 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 3edebaab-e01e-0033-21c8-214695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133829Z-r1755647c66sn7s9kfw6gzvyp000000008d0000000002xun x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:29 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49775	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:29 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:29 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: c30aac03-701e-0098-3e64-23395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133829Z-17fbfdc98bbx4f4q0941cebmvs00000005v000000000307v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:29 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49776	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:29 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:29 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 1c1a6b29-f01e-0096-0e50-2310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133829Z-17fbfdc98bbk7nhquz3tfc3wbg00000005z00000000009m4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:29 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49779	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:30 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:30 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: b93710ac-501e-007b-525a-235ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133830Z-17fbfdc98bbcrtjhdvnfuyp288000000060g0000000039vd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:30 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49778	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:30 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:30 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: e2670bef-801e-008f-375d-232c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133830Z-17fbfdc98bb7qlzm4x52d2225c00000005xg0000000025gk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:30 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49777	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:30 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:30 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 93d9d0c2-201e-0085-2492-1f34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133830Z-r1755647c66lljn2k9s29ch9ts00000008d0000000002arp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:30 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49780	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:30 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:30 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 6949b098-b01e-0084-1a35-21d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133830Z-r1755647c66kv68zfmyfrbcqzg00000006ug000000003ydb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:30 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49781	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:30 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:30 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 8a7344d1-601e-0084-805a-236b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133830Z-r1755647c66prnf6k99z0m3kzc000000086g0000000094r4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:30 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49784	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:31 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:31 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 58585528-701e-000d-4f7a-236de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133831Z-r1755647c66z4pt7cv1pnqayy4000000087g000000007yad x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:31 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49782	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:31 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:31 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 6ff76e76-001e-002b-21c5-2099f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133831Z-r1755647c66dj7986akr8tvaw400000007hg0000000066eu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:31 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49783	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:31 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:31 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 3cf1b782-701e-0001-32e5-21b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133831Z-r1755647c669hnl7dkxy835cqc000000062g00000000570h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:31 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49785	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:31 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:31 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 55f0b2c4-501e-008f-5c50-239054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133831Z-17fbfdc98bbnhb2b0umpa641c800000005sg000000005d2a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:31 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49786	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:31 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:31 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: c04d3aa5-c01e-002b-4b56-236e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133831Z-17fbfdc98bbpc9nz0r22pywp080000000620000000001sky x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:31 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49789	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:32 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:32 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 319a90d3-d01e-0066-4138-21ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133832Z-r1755647c66k9st9tvd58z9dg8000000086g000000008hsh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:32 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49790	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:32 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:32 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 1f9c3bb8-d01e-0014-220b-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133832Z-r1755647c66d87vp2n0g7qt8bn00000007h00000000063s2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:32 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49788	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:32 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:32 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 064568ba-501e-008c-7d65-23cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133832Z-17fbfdc98bbg2mc9qrpn009kgs00000005y0000000005e9e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:32 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49791	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:32 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:32 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 28cba52f-701e-006f-3692-1fafc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133832Z-r1755647c66vrwbmeqw88hpesn000000080g0000000062me x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:32 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49792	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:33 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:33 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 8700b1e1-801e-008f-0e93-212c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133833Z-r1755647c66gb86l6k27ha2m1c00000006t0000000005sph x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:33 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49793	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:33 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:33 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: e337ee23-e01e-003c-1ecf-20c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133833Z-r1755647c66sn7s9kfw6gzvyp00000000870000000007zve x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:33 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49795	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:33 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:33 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: f5c3fbe0-b01e-0002-646f-231b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133833Z-17fbfdc98bbcrtjhdvnfuyp28800000005x00000000069wc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:34 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49794	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:33 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:33 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: be98e2c6-601e-0001-2b87-21faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133833Z-r1755647c668mbb8rg8s8fbge4000000056g000000004rte x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:34 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49787	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:33 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:33 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 9e0e1983-701e-003e-2856-2379b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133833Z-r1755647c66j878m0wkraqty3800000006xg0000000009r5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:34 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49796	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:34 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:34 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 1b8ca13b-901e-008f-4667-2067a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133834Z-r1755647c66sn7s9kfw6gzvyp000000008b0000000004rmm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:34 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49797	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:34 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:34 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 40ca5ebb-901e-0048-7827-21b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133834Z-r1755647c66l72xfkr6ug378ks0000000750000000005h2k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:34 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49799	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:34 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:34 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 0c1e418e-701e-0021-2a50-233d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133834Z-17fbfdc98bbgpkh7048gc3vfcc0000000600000000004715 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:34 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49798	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:34 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:34 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: f6d2fe15-801e-007b-74f2-21e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133834Z-r1755647c66k9st9tvd58z9dg8000000088g000000005dzt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:34 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49800	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:34 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:34 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 68ab0001-401e-0064-04b8-2054af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133834Z-r1755647c669hnl7dkxy835cqc000000063g000000003pzc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:34 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49801	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:35 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:35 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 8d905448-c01e-0079-0365-23e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133835Z-17fbfdc98bb9dlh7es9mrdw2qc00000005rg000000004bt7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:35 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49802	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:35 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:35 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 71d2c1fc-001e-00a2-01de-21d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133835Z-r1755647c668mbb8rg8s8fbge40000000580000000002shb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:35 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49805	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:35 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:35 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 9cd877b9-501e-0016-1f56-23181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133835Z-17fbfdc98bb9dlh7es9mrdw2qc00000005t00000000038c1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:35 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49804	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:35 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:35 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 629c9caa-001e-0079-2150-2312e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133835Z-17fbfdc98bbnhb2b0umpa641c800000005r0000000005d53 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:35 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49803	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:35 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:35 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 0688ef78-901e-0029-5550-23274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133835Z-17fbfdc98bbmh88pm95yr8cy5n00000004qg000000005ta7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:35 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49809	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:36 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:36 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 14f65908-801e-008f-32d6-202c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133836Z-r1755647c66x46wg1q56tyyk6800000007kg000000004yg3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:36 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49806	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:36 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:36 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: e692d532-001e-00a2-3ae7-20d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133836Z-r1755647c66kmfl29f2su56tc4000000091g000000006a1v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:36 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49808	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:36 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:36 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 7fcc546d-701e-001e-80a3-21f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133836Z-r1755647c66zkj29xnfn2r3bwn00000005cg000000007mu5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:36 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49810	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:36 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:36 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: d4a2e493-801e-0048-07d3-20f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133836Z-r1755647c66nxct5p0gnwngmx000000007q00000000000h6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:36 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49807	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:36 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:36 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 4edb1b06-d01e-00a1-56e1-2035b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133836Z-r1755647c66h2wzt2z0cr0zc7400000002bg0000000082p9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:36 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49813	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:37 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:37 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 44b67bbb-401e-0067-2250-2309c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133837Z-17fbfdc98bbvwcxrk0yzwg4d5800000005xg000000004caq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:37 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49811	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:37 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:37 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: f94d3c24-301e-001f-4850-23aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133837Z-17fbfdc98bbvwcxrk0yzwg4d5800000005ug000000005xhf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:37 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49815	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:37 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:37 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 55f0c68d-501e-008f-5d50-239054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133837Z-r1755647c66m4jttnz6nb8kzng00000006s0000000006xd7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:37 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49814	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:37 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:37 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 97d7c53d-b01e-001e-2be3-200214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133837Z-r1755647c66x46wg1q56tyyk6800000007fg0000000070pp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:37 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49812	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:37 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:37 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: cc65e471-501e-008c-15b8-20cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133837Z-r1755647c66xrxq4nv7upygh4s00000001tg000000004ytb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:37 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49816	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:38 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:38 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 6acd84c4-d01e-0066-15aa-20ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133838Z-r1755647c66zkj29xnfn2r3bwn00000005cg000000007mur x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:38 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49817	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:38 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:38 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 143ffe56-901e-0067-3a0b-22b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133838Z-r1755647c66x46wg1q56tyyk6800000007hg000000005cf5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:38 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49818	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:38 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:38 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: fc76d5e5-a01e-003d-2e6c-2398d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133838Z-17fbfdc98bbgzrcvp7acfz2d3000000005w0000000005etf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:38 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49820	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:38 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:38 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2157dfbc-901e-0048-585d-23b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133838Z-17fbfdc98bbnhb2b0umpa641c800000005v0000000003kxr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:38 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49819	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:38 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:38 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: ac69ef67-e01e-001f-7714-221633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133838Z-r1755647c66c9glmgg3prd89mn000000089g000000006dr8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:38 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49825	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:39 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:39 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 37f3176e-001e-0082-5159-235880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133839Z-17fbfdc98bbn5xh71qanksxprn0000000620000000001mgx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:39 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49824	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:39 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:39 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: e131a4b8-201e-005d-245d-23afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133839Z-17fbfdc98bbgqz661ufkm7k13c00000005r0000000005uz7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:39 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49826	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:39 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:39 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 0cefa6ce-701e-0097-1ce3-20b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133839Z-r1755647c66j878m0wkraqty3800000006w0000000002nxf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:39 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49822	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:39 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:39 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 34547014-f01e-003f-75cc-20d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133839Z-r1755647c66kmfl29f2su56tc4000000096g0000000002r3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:39 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49823	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:39 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:39 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: ee1cea45-f01e-003f-5750-23d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133839Z-17fbfdc98bbvf2fnx6t6w0g25n0000000600000000001kp0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:39 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49828	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:40 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:40 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 5871072e-001e-0034-4bb0-20dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133840Z-r1755647c66x46wg1q56tyyk6800000007k0000000005emd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:40 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49827	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:40 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:40 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 33ac99f4-801e-0015-0d56-23f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133840Z-17fbfdc98bbnpjstwqrbe0re7n00000005r0000000006vru x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:40 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49829	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:40 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:40 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 610ea227-401e-00ac-206b-230a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133840Z-17fbfdc98bblptj7fr9s141cpc00000005sg000000006tyy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:40 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49830	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:40 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:40 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d7699e86-701e-0050-405d-236767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133840Z-17fbfdc98bb2fzn810kvcg2zng0000000610000000003c7d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:40 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49831	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:40 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:40 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 2f548e5b-201e-003c-5d24-2130f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133840Z-r1755647c66f2zlraraf0y5hrs00000006u0000000004x13 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:40 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49832	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:41 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:41 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: d90f75f3-d01e-0066-095d-23ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133841Z-17fbfdc98bb4k5z6ayu7yh2rsn00000005xg000000004921 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:41 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49835	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:41 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:41 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 3ee1fb64-201e-00aa-2159-233928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133841Z-17fbfdc98bb7k7m5sdc8baghes00000005tg000000007fx6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:41 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49833	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:41 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:41 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:41 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 4aa30514-001e-0014-5150-235151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133841Z-r1755647c66m4jttnz6nb8kzng00000006tg0000000059x2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:41 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49834	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:41 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:41 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 3e8b3e47-701e-006f-544e-22afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133841Z-17fbfdc98bb75b2fuh11781a0n00000005u00000000042b5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:41 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49836	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:41 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:41 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:41 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 0eea03f1-d01e-0066-098a-21ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133841Z-r1755647c66cdf7jx43n17haqc0000000930000000003ze3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:41 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	54402	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:42 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:42 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:42 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 47efb004-101e-0017-69d3-2047c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133842Z-r1755647c66xrxq4nv7upygh4s00000001rg000000006ebh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:42 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	54404	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:42 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:42 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:42 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: d0d0f8e5-601e-000d-298c-212618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133842Z-r1755647c66prnf6k99z0m3kzc0000000870000000007trq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:42 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	54403	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:42 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:42 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:42 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 639ae494-d01e-0082-069a-20e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133842Z-r1755647c66d87vp2n0g7qt8bn00000007n0000000002wsm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:42 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	54405	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:42 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:42 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:42 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 46032cb8-c01e-007a-5b59-23b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133842Z-17fbfdc98bb96dqv0e332dtg6000000005wg000000000vv8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:42 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	54406	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:42 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:42 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:42 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 48cb41bd-401e-0064-5c64-2354af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133842Z-17fbfdc98bbg2mc9qrpn009kgs000000061g000000002afr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:42 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	54408	35.190.80.1	443	4996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:42 UTC	564	OUT	OPTIONS /report/v4?s=VHYzKwCdwE4MDVAKlc7iaBiKOb8moXGnZgTs4Uu%2Bx8n7DV6ysVuF77jM1v4LqEca2N7i5XHIvP4FJfcYCs4%2FUpuspUvbBZqUSKkEt5baaJIEgjZTzAoGaMErlNcU2QehndVS6yaRuOFBKx%2FmKqM%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://re.e-sharedonedrivefile.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 13:38:43 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Wed, 23 Oct 2024 13:38:42 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	54407	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:43 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:43 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:43 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 55d9b643-201e-003f-330b-226d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133843Z-r1755647c66k9st9tvd58z9dg8000000088000000000729r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:43 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	54410	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:43 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:43 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:43 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: b7bcbf2c-f01e-0071-0ae2-20431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133843Z-r1755647c66dj7986akr8tvaw400000007gg000000006t8h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:43 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	54409	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:43 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:43 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:43 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: a52fde13-501e-0078-6a5d-2306cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133843Z-17fbfdc98bbgpkh7048gc3vfcc00000005zg00000000481s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:43 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	54411	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:43 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:43 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:43 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 44b73ccb-201e-0096-2a5d-23ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133843Z-r1755647c66kv68zfmyfrbcqzg00000006wg0000000027g7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:43 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	54412	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:43 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:43 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:43 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 6dbd05ca-401e-0078-0659-234d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133843Z-17fbfdc98bbrx2rj4asdpg8sbs00000001x0000000001czw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:43 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	54414	35.190.80.1	443	4996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:43 UTC	494	OUT	POST /report/v4?s=VHYzKwCdwE4MDVAKlc7iaBiKOb8moXGnZgTs4Uu%2Bx8n7DV6ysVuF77jM1v4LqEca2N7i5XHIvP4FJfcYCs4%2FUpuspUvbBZqUSKkEt5baaJIEgjZTzAoGaMErlNcU2QehndVS6yaRuOFBKx%2FmKqM%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 484 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 13:38:43 UTC	484	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 38 32 37 37 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 34 30 39 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 72 65 2e 65 2d 73 68 61 72 65 64 6f 6e 65 64 72 69 76 65 66 69 6c 65 2e 63 6f 6d 2f 33 33 6c 72 72 74 65 76 70 6e 6e 32 36 70 69 7a 62 76 66 76 39 39 76 6c 66 71 37 76 34 7a 32 75 72 37 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 34 39 2e 31 37 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 Data Ascii: [{"age":58277,"body":{"elapsed_time":1409,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://re.e-sharedonedrivefile.com/33lrrtevpnn26pizbvfv99vlfq7v4z2ur7","sampling_fraction":1.0,"server_ip":"172.67.149.171","status_code":404
2024-10-23 13:38:44 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Wed, 23 Oct 2024 13:38:43 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	54415	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:43 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:44 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:43 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 8d011c5a-801e-0047-22f7-217265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133843Z-r1755647c66n5bjpba5s4mu9d0000000089g000000006twp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:44 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	54417	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:43 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:44 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:44 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 7898325b-901e-00ac-11c9-20b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133844Z-r1755647c66zs9x4962sbyaz1w00000006n00000000000qm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:44 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	54416	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:43 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:44 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:43 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 667d1099-601e-003e-17c9-203248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133843Z-r1755647c66l72xfkr6ug378ks0000000720000000008b2x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:44 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	54418	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:43 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:44 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:44 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: ef02ab36-401e-0064-3bb0-2054af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133844Z-r1755647c66vrwbmeqw88hpesn000000084g000000001hcv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:44 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	54419	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:44 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:44 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:44 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 816a6405-301e-001f-06d8-21aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133844Z-17fbfdc98bblptj7fr9s141cpc00000005y0000000001f0k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:44 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	54420	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:44 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:45 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:44 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 31e4fe8c-301e-0033-38f2-21fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133844Z-r1755647c66l72xfkr6ug378ks000000075g000000004vxv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:45 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	54422	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:44 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:45 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:44 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: ee1afe0a-301e-0052-2b50-2365d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133844Z-17fbfdc98bbnpjstwqrbe0re7n00000005u0000000004dw4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:45 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	54423	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:44 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:45 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:44 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: c2ed4d23-701e-0098-0959-23395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133844Z-17fbfdc98bbk7nhquz3tfc3wbg00000005sg000000006d6f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:45 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	54421	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:44 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:45 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:44 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 2a979a5c-f01e-003f-77f7-21d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133844Z-r1755647c66x46wg1q56tyyk6800000007pg000000000tsh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:45 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	54424	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:44 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:45 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:44 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e682fb07-001e-00a2-2ae3-20d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133844Z-r1755647c66zkj29xnfn2r3bwn00000005h0000000002feu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:45 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	54425	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:45 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:45 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:45 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 5d978800-401e-000a-2456-234a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133845Z-17fbfdc98bb2fzn810kvcg2zng00000006300000000004bz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:45 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	54426	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:45 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:45 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:45 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: a2099384-101e-008d-760b-2292e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133845Z-r1755647c66kv68zfmyfrbcqzg00000006x0000000000zb1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:45 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	54427	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:45 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:45 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:45 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 0efe6ec1-b01e-0053-7d56-23cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133845Z-r1755647c668mbb8rg8s8fbge40000000580000000002str x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:45 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	54428	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:45 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:46 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:45 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 602b3158-201e-000c-61c7-2079c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133845Z-r1755647c66c9glmgg3prd89mn00000008b0000000004der x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:46 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	54429	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:45 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:46 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:45 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 654233af-a01e-001e-0b27-2149ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133845Z-r1755647c66zkj29xnfn2r3bwn00000005cg000000007myz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:46 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	54431	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:47 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:47 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:47 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: f0881de6-001e-002b-6759-2399f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133847Z-17fbfdc98bbcrtjhdvnfuyp2880000000600000000003uqf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:47 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	54430	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:47 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:47 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:47 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 3ed3a1a2-201e-0085-145a-2334e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133847Z-17fbfdc98bbn5xh71qanksxprn00000005zg0000000048m9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:47 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	54432	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:47 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:47 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:47 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: b9c92f65-401e-0016-1c27-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133847Z-r1755647c66f2zlraraf0y5hrs00000006sg000000006q5e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:47 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	54433	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:47 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:47 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:47 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: fca683ae-601e-0070-466b-23a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133847Z-17fbfdc98bb2fzn810kvcg2zng0000000620000000001rfm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:47 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	54434	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:47 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:47 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:47 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 062c286a-b01e-005c-0c8e-214c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133847Z-r1755647c66tmf6g4720xfpwpn000000095g0000000022ug x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:47 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	54435	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:48 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:48 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:48 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 9f7c1011-d01e-0065-1a3b-22b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133848Z-17fbfdc98bbqc8zsbguzmabx6800000005q00000000068bs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:48 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	54437	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:48 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:48 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:48 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: c39b20d8-e01e-001f-4a5d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133848Z-r1755647c66xrxq4nv7upygh4s00000001w00000000032g0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:48 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	54436	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:48 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:48 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:48 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 475da012-701e-0001-146c-23b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133848Z-17fbfdc98bbvcvlzx1n0fduhm0000000060g000000003m7a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:48 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	54439	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:48 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:48 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:48 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: baa41b4f-401e-00ac-2c28-210a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133848Z-r1755647c66gb86l6k27ha2m1c00000006t0000000005szq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:48 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	54438	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:48 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:48 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:48 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: e014a2e3-501e-0035-060b-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133848Z-r1755647c66nfj7t97c2qyh6zg000000057000000000307t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:48 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	54441	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:49 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:49 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:49 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 2e9d796b-b01e-00ab-5859-23dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133849Z-17fbfdc98bb6q7cv86r4xdspkg00000005x0000000004axt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:49 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	54440	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:49 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:49 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:49 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: b1cc7e4f-b01e-001e-6956-230214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133849Z-17fbfdc98bblptj7fr9s141cpc00000005xg000000002731 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:49 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	54443	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:49 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:49 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:49 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 1aa3d3a7-101e-0034-0792-1f96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133849Z-r1755647c66ww2rh494kknq3r000000009000000000070v9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:49 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	54442	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:49 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:49 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:49 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 728679af-d01e-007a-566c-23f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133849Z-17fbfdc98bbgqz661ufkm7k13c00000005t000000000429s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:49 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	54444	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:49 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:49 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:49 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: efa6dde7-e01e-0071-750c-2208e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133849Z-r1755647c66x46wg1q56tyyk6800000007fg0000000070uz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:49 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	54445	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:49 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:50 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:50 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 23449c74-401e-0083-0a50-23075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133850Z-17fbfdc98bbnmnfvzuhft9x8zg00000004mg0000000045rd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:50 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	54446	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:49 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:50 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:50 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 474bc074-b01e-0002-67b0-201b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133850Z-r1755647c66k9st9tvd58z9dg8000000089g0000000066c3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:50 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	54449	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:50 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:50 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:50 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 7d169aa3-d01e-0017-7930-21b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133850Z-r1755647c66m4jttnz6nb8kzng00000006xg00000000089f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:50 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	54447	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:50 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:50 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:50 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 8b373834-501e-008c-26e4-21cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133850Z-r1755647c66nfj7t97c2qyh6zg000000058g000000000hqv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:50 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	54448	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:50 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:50 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:50 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 0b335c04-001e-0049-76aa-215bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133850Z-r1755647c669hnl7dkxy835cqc000000066g0000000004a3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:50 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	54451	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:50 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:51 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:50 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: fa7d2ad1-701e-0098-7450-23395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133850Z-17fbfdc98bblptj7fr9s141cpc00000005s0000000006xty x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:51 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	54450	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:50 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:51 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:50 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 47247c95-c01e-00a1-575a-237e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133850Z-17fbfdc98bb75b2fuh11781a0n00000005pg0000000075kn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:51 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	54453	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:50 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:51 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:50 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 5a5a6e35-401e-00a3-0b56-238b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133850Z-17fbfdc98bb75b2fuh11781a0n00000005qg0000000067a6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:51 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	54454	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:50 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:51 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:50 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 80b3223a-a01e-0002-4456-235074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133850Z-17fbfdc98bbqc8zsbguzmabx6800000005r00000000051xv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:51 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	54452	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:50 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:51 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:50 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: ce674b06-f01e-0052-7d0b-229224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133850Z-r1755647c66kmfl29f2su56tc400000008zg0000000078sg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:51 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	54455	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:51 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:51 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:51 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: b7d5c986-501e-005b-0250-23d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133851Z-17fbfdc98bb4k5z6ayu7yh2rsn00000005yg0000000039k0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:51 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	54456	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:51 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:51 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:51 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 5fe4c9d5-d01e-008e-1959-23387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133851Z-17fbfdc98bb9tt772yde9rhbm800000005vg000000003y6t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:51 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	54457	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:51 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:51 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:51 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 4b1eeebb-201e-0051-0fab-217340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133851Z-r1755647c66d87vp2n0g7qt8bn00000007gg0000000071wp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:51 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	54458	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:51 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:51 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:51 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: c25cd208-b01e-0070-595d-231cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133851Z-17fbfdc98bbg2mc9qrpn009kgs00000005yg0000000057q2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:51 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	54459	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:51 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:51 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:51 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 10ca92f3-d01e-008e-1b31-22387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133851Z-r1755647c66n5bjpba5s4mu9d0000000086g000000008t7w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:51 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	54460	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:52 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:52 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:52 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: aba5bc6a-e01e-0003-59e5-210fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133852Z-r1755647c66j878m0wkraqty3800000006r0000000007e3b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:52 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	54464	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:52 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:52 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:52 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: ae8fe88e-901e-005b-2456-232005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133852Z-17fbfdc98bbl89flqtm21qm6rn00000005yg0000000050qu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:52 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	54462	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:52 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:52 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:52 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: 1bb821d9-c01e-0046-5959-232db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133852Z-17fbfdc98bb8xnvm6t4x6ec5m400000005q0000000005k1r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:52 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	54461	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:38:52 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:38:52 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:38:52 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 35e941fb-301e-005d-58de-21e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133852Z-r1755647c66f2zlraraf0y5hrs00000006r000000000827c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:38:52 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Target ID:	0
Start time:	09:37:26
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	09:37:35
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=2000,i,776413188470899524,6089410946391969851,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	09:37:39
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://re.e-sharedonedrivefile.com/skjashd"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: re.e-sharedonedrivefile.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://re.e-sharedonedrivefile.com/skjashd

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1228_971661787\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1228_971661787\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1228_971661787\manifest.json

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 1228, Parent PID: 1508

General

Chronological Activities

Analysis Process: chrome.exePID: 4996, Parent PID: 1228

General

Chronological Activities

Analysis Process: chrome.exePID: 6272, Parent PID: 1508

General

Chronological Activities

Windows Analysis Report
https://re.e-sharedonedrivefile.com/skjashd