Edit tour

Windows Analysis Report
https://www.timesheetz.net/EtzWeb/u/a3fc03fa61

Overview

General Information

Sample URL:	https://www.timesheetz.net/EtzWeb/u/a3fc03fa61
Analysis ID:	1541906
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 600 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5680 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2496 --field-trial-handle=2464,i,11157100231109898546,10681944756199115181,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6316 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.timesheetz.net/EtzWeb/u/a3fc03fa61" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49908 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /EtzWeb/u/a3fc03fa61 HTTP/1.1Host: www.timesheetz.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /EtzWeb/s/35140691/146ddce569974637a1dfcf230bcaf0bb HTTP/1.1Host: www.timesheetz.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ApplicationGatewayAffinityCORS=c7581c187614b8cc3302bd4d87317ffa; ApplicationGatewayAffinity=c7581c187614b8cc3302bd4d87317ffa; ASP.NET_SessionId=h315axbt1enderutazvarthe
Source: global traffic	HTTP traffic detected: GET /EtzWeb/Error/AlreadyEtzSigned HTTP/1.1Host: www.timesheetz.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ApplicationGatewayAffinityCORS=c7581c187614b8cc3302bd4d87317ffa; ApplicationGatewayAffinity=c7581c187614b8cc3302bd4d87317ffa; ASP.NET_SessionId=h315axbt1enderutazvarthe
Source: global traffic	HTTP traffic detected: GET /EtzWeb/Css/bootstrap.css HTTP/1.1Host: www.timesheetz.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.timesheetz.net/EtzWeb/Error/AlreadyEtzSignedAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ApplicationGatewayAffinityCORS=c7581c187614b8cc3302bd4d87317ffa; ApplicationGatewayAffinity=c7581c187614b8cc3302bd4d87317ffa; ASP.NET_SessionId=h315axbt1enderutazvarthe
Source: global traffic	HTTP traffic detected: GET /Static/images/Branding/error-page.png HTTP/1.1Host: www.timesheetz.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.timesheetz.net/EtzWeb/Error/AlreadyEtzSignedAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ApplicationGatewayAffinityCORS=c7581c187614b8cc3302bd4d87317ffa; ApplicationGatewayAffinity=c7581c187614b8cc3302bd4d87317ffa; ASP.NET_SessionId=h315axbt1enderutazvarthe
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /Static/images/Branding/error-page.png HTTP/1.1Host: www.timesheetz.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ApplicationGatewayAffinityCORS=c7581c187614b8cc3302bd4d87317ffa; ApplicationGatewayAffinity=c7581c187614b8cc3302bd4d87317ffa; ASP.NET_SessionId=h315axbt1enderutazvarthe
Source: global traffic	HTTP traffic detected: GET /Static/images/Branding/favicon.png HTTP/1.1Host: www.timesheetz.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.timesheetz.net/EtzWeb/Error/AlreadyEtzSignedAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ApplicationGatewayAffinityCORS=c7581c187614b8cc3302bd4d87317ffa; ApplicationGatewayAffinity=c7581c187614b8cc3302bd4d87317ffa; ASP.NET_SessionId=h315axbt1enderutazvarthe; __utma=56068014.2104757465.1729843252.1729843252.1729843252.1; __utmc=56068014; __utmz=56068014.1729843252.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; ai_user=W7M+S\|2024-10-25T08:00:52.122Z; __utmb=56068014.2.9.1729843253088
Source: global traffic	HTTP traffic detected: GET /Static/images/Branding/favicon.png HTTP/1.1Host: www.timesheetz.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ApplicationGatewayAffinityCORS=c7581c187614b8cc3302bd4d87317ffa; ApplicationGatewayAffinity=c7581c187614b8cc3302bd4d87317ffa; ASP.NET_SessionId=h315axbt1enderutazvarthe; __utma=56068014.2104757465.1729843252.1729843252.1729843252.1; __utmc=56068014; __utmz=56068014.1729843252.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; ai_user=W7M+S\|2024-10-25T08:00:52.122Z; __utmb=56068014.2.9.1729843253088; ai_session=/KVMp\|1729843253127.8\|1729843253127.8
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: www.timesheetz.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: dc.services.visualstudio.com

Source: chromecache_56.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_54.2.dr, chromecache_57.2.dr	String found in binary or memory: http://www.google-analytics.com
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: chromecache_52.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI
Source: chromecache_52.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4iaVI
Source: chromecache_52.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4jaVI
Source: chromecache_52.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4kaVI
Source: chromecache_52.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4saVI
Source: chromecache_52.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4taVI
Source: chromecache_52.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVI
Source: chromecache_52.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4vaVI
Source: chromecache_52.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B5OaVI
Source: chromecache_52.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B5caVI
Source: chromecache_54.2.dr, chromecache_57.2.dr	String found in binary or memory: https://ssl.google-analytics.com
Source: chromecache_54.2.dr, chromecache_57.2.dr	String found in binary or memory: https://ssl.google-analytics.com/j/__utm.gif
Source: chromecache_54.2.dr, chromecache_57.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect?
Source: chromecache_57.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences?
Source: chromecache_54.2.dr, chromecache_57.2.dr	String found in binary or memory: https://www.google.com/analytics/web/inpage/pub/inpage.js?

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49908 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@16/20@10/4

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2496 --field-trial-handle=2464,i,11157100231109898546,10681944756199115181,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.timesheetz.net/EtzWeb/u/a3fc03fa61"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2496 --field-trial-handle=2464,i,11157100231109898546,10681944756199115181,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://stats.g.doubleclick.net/j/collect?	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.186.164	true	false	unknown
www.timesheetz.net	104.26.10.58	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
dc.services.visualstudio.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://www.timesheetz.net/Static/images/Branding/favicon.png	false	unknown
https://www.timesheetz.net/EtzWeb/Css/bootstrap.css	false	unknown
https://www.timesheetz.net/EtzWeb/s/35140691/146ddce569974637a1dfcf230bcaf0bb	false	unknown
https://www.timesheetz.net/EtzWeb/u/a3fc03fa61	false	unknown
https://www.timesheetz.net/EtzWeb/Error/AlreadyEtzSigned	false	unknown
https://www.timesheetz.net/Static/images/Branding/error-page.png	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.apache.org/licenses/LICENSE-2.0	chromecache_56.2.dr	false		unknown
https://www.google.%/ads/ga-audiences?	chromecache_57.2.dr	false		unknown
https://stats.g.doubleclick.net/j/collect?	chromecache_54.2.dr, chromecache_57.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/analytics/web/inpage/pub/inpage.js?	chromecache_54.2.dr, chromecache_57.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.26.10.58	www.timesheetz.net	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1541906
Start date and time:	2024-10-25 09:59:43 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 11s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.timesheetz.net/EtzWeb/u/a3fc03fa61
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@16/20@10/4

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 64.233.166.84, 142.250.185.142, 142.250.185.131, 34.104.35.123, 142.250.185.234, 142.250.186.163, 152.199.19.161, 216.58.206.72, 142.250.185.232, 20.50.88.238, 20.50.88.234, 20.12.23.50, 199.232.214.172, 192.229.221.95, 13.85.23.206, 40.69.42.241, 216.58.206.67
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, clients2.google.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, gig-ai-g-prod-westeurope-3-app-v4-tag.westeurope.cloudapp.azure.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, gig-ai-g-prod-westeurope-6-app-v4-tag.westeurope.cloudapp.azure.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, az416426.vo.msecnd.net, fe3cr.delivery.mp.microsoft.com, ssl.google-analytics.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, dc.trafficmanager.net, dc.applicationinsights.microsoft.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, cs9.wpc.v0cdn.net, gig-ai-prod-westeurope-global.trafficmanager.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://www.timesheetz.net/EtzWeb/u/a3fc03fa61

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 50

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18668, version 1.0
Category:	downloaded
Size (bytes):	18668
Entropy (8bit):	7.988119248989337
Encrypted:	false
SSDEEP:	384:1stcBfAVaR8i6XzMsb4fcjakBudFyBqrgeU0hipgwfqj09nOt/a:1k0F6Xz1bFjaPbyBqr9hIgkM3Fa
MD5:	8655D20BBCC8CDBFAB17B6BE6CF55DF3
SHA1:	90EDBFA9A7DABB185487B4774076F82EB6412270
SHA-256:	E7AF9D60D875EB1C1B1037BBBFDEC41FCB096D0EBCF98A48717AD8B07906CED6
SHA-512:	47308DE25BD7E4CA27F59A2AE681BA64393FE4070E730C1F00C4053BAC956A9B4F7C0763C04145BC50A5F91C12A0BF80BDD4B03EECC2036CD56B2DB31494CBAF
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
Preview:	wOF2......H...........H..........................\|.....h.`?STAT^..0..\|...........+..2..6.$..`. ..x........z'o..w;....6.E....6....E...'$H.#.....n1X..JU/.d.O..JC.'J".v.v.l.h.....u.S...SY.....B.hz.o.}......W......%m6...A..=....\..m. .]..~.[..........]...I..h.=.....6.xt..F....Lt...Qs-.7..{...~BI.".F.Q......F...P..dMw..#I2........Rq.Q&.0@.;..;...3VG..:c.nki..-Q..2##e.u...8n....\?....T..b....^..#...../.J\|OM..St....e.S.}!.....>..i.T/a.ES%.W.P3..`..a.R.A.....!~g..74.np8o.....d[6?.P.4)P.....AG.3.......;#0.y....M..O/2.@.4..N.vA$.:M&H,.AT".........@..a.~..L->...0@h...~.._..N"......t......C./g7..............2E.N.J...TW.F..."A.B...n.......i.?.{\.L.!.B..x...S..!........?.\,... .@.....y"xw.A8.w..!E..-^P O..+.T.r.R.zz..K..].E.....Ri.)g.P...j..w..c.M.F.v../........Q....'...(....X..;.K.!BZ3.........f.....N.A(....cA`.b'...`.~sa^.....?..../.L.S......t..`@h..C.....>N.W...;>..._h.+~=\|......uOGA{.7.....h....q.d.4$.x<.....^0\|...@....@Q[RC.0....b....'...RID

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2295
Entropy (8bit):	7.888481039029385
Encrypted:	false
SSDEEP:	48:7+lCXmsxnSTlnKNCXYL8Z/xQHb8ku6vNRJaD1/tsNErQj1:7+PTlKNC5JQ7zNRJ6Zt54
MD5:	7067FD3F2CDF4DA8858C5DD1695C8314
SHA1:	385BE7A93E70A5A6A44C5B4283DABFCBE11FE83B
SHA-256:	A93F734D47E37E634E7B24741867CD7A08EB62DCE5E7D4C55A93EFBB52322AE0
SHA-512:	7BFA149AA95D6A6CAAE5986185DFB12299C51D74E7EBFA974349EF6A57CEFF4EC6DB10451A9B24AEEB9850ECE8B65FF4C38B3BCEE3E9D92DF066F83069E9B2DC
Malicious:	false
Reputation:	low
URL:	https://www.timesheetz.net/Static/images/Branding/favicon.png
Preview:	.PNG........IHDR... ... .....szz.....gAMA....7.......tEXtSoftware.Adobe ImageReadyq.e<....IDATx.Wkl.W.>wfvg......N.G.&.m.$.....D.T..........@.B..@......m)R#..TU..U..E....6DJp.....S;Y?v...7.3k..MA...3w.=..\|..3...Q.......B....P.....,..T...k..p.e.y...PK.U...N..=..i..0.`.G..PLh..9.%!....\.~.F+[..&..=P....N....4'(.g.....X...=..x.B".^.....FB..5........X..oD0...{.:.:.bsfOg<{r ........m........w'..6V...E....F,2.p^...7i.>..4t..F.G...(..!...;...g.S....s,X..:........%........_...E.V..-{X....6..............^...<.2bD...+........\V=.;..2.[;V....~f...OGj..j)gX...h.!.5..F.^.....>5...e.U...8;zPS.W\..e..^......X......(......2DUI.a.t.<.c..3.^Il.@.../]>.x)....".i.#..#%1L........'..PT ...m.4.D.m.u.. p.q.~..-VJ.KoE8".D$.....O./..D}..,8.l.S.....g..B...((.X2.....-.D...I69....:U...x'=..>.YEM.3.._.>..`..........^.Vs....v..<g...s.]..SF.i..S.mPR.%...e..,.\|.P....40.X..K.._..:TU!T.;.vm.V..[-.N1.X9"J..,......o....Qs..+.A/N.......]].Q.....X...zd...<.G.....D\|.

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	5973
Entropy (8bit):	5.385847419693263
Encrypted:	false
SSDEEP:	96:ZOEMJJOEMiDFZ8OEMXkOEMhYOEMlOEM5y+aZjzBrWOEMfubqGIFuV4UOEMmOEMZ0:wJAiXBh1s5qb2bqGIwV4R3ZqF
MD5:	207F621B4209616283D091A5A0F8CD49
SHA1:	D34E96207B74C7446771ED458DDB74AE78121E93
SHA-256:	5780DCB011235F74EBD060A2E1D7E214E3BD12E13982BF4BD7FBE052D3D55F63
SHA-512:	91EA88B5F95863ABBB93E69AF3D7F68BD0D5C3716C5294869A64D5C08C573DA8FE1695279B397D7E7765431863013AC7AFB6DA00559C49AA49E6D4E87580C306
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Open+Sans:400
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4taVIGxA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4kaVIGxA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4saVIGxA.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-fa

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (701), with CRLF line terminators
Category:	downloaded
Size (bytes):	3770
Entropy (8bit):	4.960672663862433
Encrypted:	false
SSDEEP:	48:tXJntxcqKtE+U9h+2eOZsJExDcwFdFCwa8YGI/PHaEjt5Z2rwUnf832NlqNT1q1O:9vqqWU9IOZIExnF08HIHHpDufxS2CH
MD5:	8A9BD0C0F98E525229ABAE37FA4123FC
SHA1:	9DFDEDD55CD43BEAC588362E98CEE4C44654F622
SHA-256:	3FABE16BE57662A5A1F237DF8FEC4D6F695FFAA6012B2714406EFC85FF4D673B
SHA-512:	2BD7720461D2F5F41EB58F38CB74C91787935FF45380ACF4EF6F479852520204B0B1319695345A31B91E3BE750504D5FBD61070845F0391E84782CF093A54DE4
Malicious:	false
Reputation:	low
URL:	https://www.timesheetz.net/EtzWeb/Error/AlreadyEtzSigned
Preview:	<!DOCTYPE html>..<html lang="en">..<head ID="Head1">.. <meta charset="utf-8" />.. <title>Already Signed</title>.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. <meta name="author" content="ETZ Timesheet Solutions (www.etztimesheetsolutions.co.uk)" />.... <link href="/EtzWeb/Css/bootstrap.css" rel="stylesheet" />.. <link href='https://fonts.googleapis.com/css?family=Open+Sans:400' rel='stylesheet' type='text/css'>.... <style type="text/css">.. body {.. font-family: 'Open Sans', sans-serif;.. font-weight: 400;.. color: #666;.. font-size: 18px;.. line-height: 150%;.. }.... a, a:hover, a:active, a:visited {.. color: #00C1D5;.. text-decoration: underline;.. }.... h1 {.. margin: 0 0 0.6em;.. font-size: 45px;.. font-weight: 400;.. letter-spacing: -2px;.. line-height: 120%;..

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1305)
Category:	downloaded
Size (bytes):	46274
Entropy (8bit):	5.48786904450865
Encrypted:	false
SSDEEP:	768:aqNVrKn0VGhn+K7U1r2p/Y60fyy3/g3OMZht1z1prkfw1+9NZ5VA:RHrLVGhnpIwp/Y7cnz1RkLL5m
MD5:	E9372F0EBBCF71F851E3D321EF2A8E5A
SHA1:	2C7D19D1AF7D97085C977D1B69DCB8B84483D87C
SHA-256:	1259EA99BD76596239BFD3102C679EB0A5052578DC526B0452F4D42F8BCDD45F
SHA-512:	C3A1C74AC968FC2FA366D9C25442162773DB9AF1289ADFB165FC71E7750A7E62BD22F424F241730F3C2427AFFF8A540C214B3B97219A360A231D4875E6DDEE6F
Malicious:	false
Reputation:	low
URL:	https://ssl.google-analytics.com/ga.js
Preview:	(function(){var E;var g=window,n=document,p=function(a){var b=g._gaUserPrefs;if(b&&b.ioo&&b.ioo()\|\|a&&!0===g["ga-disable-"+a])return!0;try{var c=g.external;if(c&&c._gaUserPrefs&&"oo"==c._gaUserPrefs)return!0}catch(f){}a=[];b=n.cookie.split(";");c=/^\sAMP_TOKEN=\s(.?)\s$/;for(var d=0;d<b.length;d++){var e=b[d].match(c);e&&a.push(e[1])}for(b=0;b<a.length;b++)if("$OPT_OUT"==decodeURIComponent(a[b]))return!0;return!1};var q=function(a){return encodeURIComponent?encodeURIComponent(a).replace(/$/g,"%28").replace(/$/g,"%29"):a},r=/^(www\.)?google(\.com?)?(\.[a-z]{2})?$/,u=/(^\|\.)doubleclick\.net$/i;function Aa(a,b){switch(b){case 0:return""+a;case 1:return 1a;case 2:return!!a;case 3:return 1E3a}return a}function Ba(a){return"function"==typeof a}function Ca(a){return void 0!=a&&-1<(a.constructor+"").indexOf("String")}function F(a,b){return void 0==a\|\|"-"==a&&!b\|\|""==a}function Da(a){if(!a\|\|""==a)return"";for(;a&&-1<" \n\r\t".indexOf(a.charAt(0));)a=a.substring(1);for(;a&&-1<" \n\r\t".i

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 362 x 373, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	45601
Entropy (8bit):	7.991163263888932
Encrypted:	true
SSDEEP:	768:xvVEJt9/giCE1axZstTT2nGesjP/A4fMa3y1G7NunWqQT91nxoSVIPS7bn+YeH7E:xdUTCE1axZ7GRYgFi1guty9roS+PS7bt
MD5:	75A38FAB4C0056C8FCC5E3E35B177FB6
SHA1:	A915C4EF168A9F2226C9E5CA73252F9D0F82199A
SHA-256:	109182AF3E58897F7E4B4E637A366DA087D5BA18F4CC9CF6ED5215F2DACCC4BB
SHA-512:	FF3AC8F86B151A411BDE28E63938CBFD68024232FC67DBE550BDD1D5EEDADE0705CF73D5104FB82A3022BE08977799E4BABB0CBE849EF5C8DD4F1631DE1D7CC1
Malicious:	false
Reputation:	low
URL:	https://www.timesheetz.net/Static/images/Branding/error-page.png
Preview:	.PNG........IHDR...j...u......X......gAMA....7.......tEXtSoftware.Adobe ImageReadyq.e<....IDATx....$.y&.gU{..o1....Cx...).$A..N.E.D.$J.+..P..joc....;.VRHZCI.(jehE.......f0..<o.w....l..TuW...rPxm..de~..a.sp.[.....o..p.[......<..Cws..h.g^..!9..I..:.......L.G./y..2...p%..{B.0.......9..Z..a..?.O....}f...........(.^:...w)y..Gw..y`.........Rv.$...' >;....j.6....=...U..E..z-..Kx......,.s...k..r.\Qo.6.........H.@VW....3k.3T.{.$..bb.E....BR..o.!....C.5.<_.n.y.....A.?Kh...)X.n...aOx.bJR.o..:.c..f....+...d.,.;.........s..8...._7s....x.[..\.m......O.x..Y.>o..0...g2....Y.?....k.A....a......xv...............7..]..>...}....'..d....<.mewp...c0..........}`..q......8..}'}#p!y.L..Ql......6aCK....i...:~7..wS........b.h..>oj;."{......... ..N..uNe../~N.../.a..#..........p19..#..#...J.+4%.S35.N..1..3..v..uu\|.x..8(..Ome....;..a....8...#..Vd&c..x..p.I.-*...=.b......[...h.1....~.?..^K....3.h....g..!.J.@..h....i\|..M...(l...Zxo.F.Q7[x...l..v.[:U

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65394)
Category:	downloaded
Size (bytes):	82674
Entropy (8bit):	5.15247930397309
Encrypted:	false
SSDEEP:	768:6IfIxI7/SInIgUWA2jIlcIrVqJPKII7OcJI3IyILJssAvJi+IEaI+I/x0:v/fA2rJ2Oc5Jsz0
MD5:	9D8C44E108A57D87EA32CBE24B45A9CA
SHA1:	6AA07A3923DE22C29ED4C9AA13A62C71BE855D17
SHA-256:	6A162A45E772AF6A807C46C6C9CCA06D5ADFC04AFA082CB129B1FA5391AE77F3
SHA-512:	AEFB8B8AFC577236BBE98EF4292A4C294D9F91298ECB921EECB360E935B3526E1465BB7F7AD1E6746C7F8565E5929299AFC4663B5D5D8A564F9826F1456C6A37
Malicious:	false
Reputation:	low
URL:	https://www.timesheetz.net/EtzWeb/Css/bootstrap.css
Preview:	/! Bootstrap v2.0.4.. Copyright 2012 Twitter, Inc.* Licensed under the Apache License v2.0.* http://www.apache.org/licenses/LICENSE-2.0.. Designed and built with all the love in the world @twitter by @mdo and @fat./article,aside,details,figcaption,figure,footer,header,hgroup,nav,section{display:block}audio,canvas,video{display:inline-block;display:inline;zoom:1}audio:not([controls]){display:none}html{font-size:100%;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}a:focus{outline:thin dotted #333;outline:5px auto -webkit-focus-ring-color;outline-offset:-2px}a:hover,a:active{outline:0}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{vertical-align:middle;border:0;-ms-interpolation-mode:bicubic}#map_canvas img{max-width:none}button,input,select,textarea{margin:0;font-size:100%;vertical-align:middle}button,input{overflow:visible;line-height:normal}button::-moz-focus-inner,input::-moz-focus-inner{padding:0;bor

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1305)
Category:	dropped
Size (bytes):	46274
Entropy (8bit):	5.48786904450865
Encrypted:	false
SSDEEP:	768:aqNVrKn0VGhn+K7U1r2p/Y60fyy3/g3OMZht1z1prkfw1+9NZ5VA:RHrLVGhnpIwp/Y7cnz1RkLL5m
MD5:	E9372F0EBBCF71F851E3D321EF2A8E5A
SHA1:	2C7D19D1AF7D97085C977D1B69DCB8B84483D87C
SHA-256:	1259EA99BD76596239BFD3102C679EB0A5052578DC526B0452F4D42F8BCDD45F
SHA-512:	C3A1C74AC968FC2FA366D9C25442162773DB9AF1289ADFB165FC71E7750A7E62BD22F424F241730F3C2427AFFF8A540C214B3B97219A360A231D4875E6DDEE6F
Malicious:	false
Reputation:	low
Preview:	(function(){var E;var g=window,n=document,p=function(a){var b=g._gaUserPrefs;if(b&&b.ioo&&b.ioo()\|\|a&&!0===g["ga-disable-"+a])return!0;try{var c=g.external;if(c&&c._gaUserPrefs&&"oo"==c._gaUserPrefs)return!0}catch(f){}a=[];b=n.cookie.split(";");c=/^\sAMP_TOKEN=\s(.?)\s$/;for(var d=0;d<b.length;d++){var e=b[d].match(c);e&&a.push(e[1])}for(b=0;b<a.length;b++)if("$OPT_OUT"==decodeURIComponent(a[b]))return!0;return!1};var q=function(a){return encodeURIComponent?encodeURIComponent(a).replace(/$/g,"%28").replace(/$/g,"%29"):a},r=/^(www\.)?google(\.com?)?(\.[a-z]{2})?$/,u=/(^\|\.)doubleclick\.net$/i;function Aa(a,b){switch(b){case 0:return""+a;case 1:return 1a;case 2:return!!a;case 3:return 1E3a}return a}function Ba(a){return"function"==typeof a}function Ca(a){return void 0!=a&&-1<(a.constructor+"").indexOf("String")}function F(a,b){return void 0==a\|\|"-"==a&&!b\|\|""==a}function Da(a){if(!a\|\|""==a)return"";for(;a&&-1<" \n\r\t".indexOf(a.charAt(0));)a=a.substring(1);for(;a&&-1<" \n\r\t".i

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 362 x 373, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	45601
Entropy (8bit):	7.991163263888932
Encrypted:	true
SSDEEP:	768:xvVEJt9/giCE1axZstTT2nGesjP/A4fMa3y1G7NunWqQT91nxoSVIPS7bn+YeH7E:xdUTCE1axZ7GRYgFi1guty9roS+PS7bt
MD5:	75A38FAB4C0056C8FCC5E3E35B177FB6
SHA1:	A915C4EF168A9F2226C9E5CA73252F9D0F82199A
SHA-256:	109182AF3E58897F7E4B4E637A366DA087D5BA18F4CC9CF6ED5215F2DACCC4BB
SHA-512:	FF3AC8F86B151A411BDE28E63938CBFD68024232FC67DBE550BDD1D5EEDADE0705CF73D5104FB82A3022BE08977799E4BABB0CBE849EF5C8DD4F1631DE1D7CC1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...j...u......X......gAMA....7.......tEXtSoftware.Adobe ImageReadyq.e<....IDATx....$.y&.gU{..o1....Cx...).$A..N.E.D.$J.+..P..joc....;.VRHZCI.(jehE.......f0..<o.w....l..TuW...rPxm..de~..a.sp.[.....o..p.[......<..Cws..h.g^..!9..I..:.......L.G./y..2...p%..{B.0.......9..Z..a..?.O....}f...........(.^:...w)y..Gw..y`.........Rv.$...' >;....j.6....=...U..E..z-..Kx......,.s...k..r.\Qo.6.........H.@VW....3k.3T.{.$..bb.E....BR..o.!....C.5.<_.n.y.....A.?Kh...)X.n...aOx.bJR.o..:.c..f....+...d.,.;.........s..8...._7s....x.[..\.m......O.x..Y.>o..0...g2....Y.?....k.A....a......xv...............7..]..>...}....'..d....<.mewp...c0..........}`..q......8..}'}#p!y.L..Ql......6aCK....i...:~7..wS........b.h..>oj;."{......... ..N..uNe../~N.../.a..#..........p19..#..#...J.+4%.S35.N..1..3..v..uu\|.x..8(..Ome....;..a....8...#..Vd&c..x..p.I.-*...=.b......[...h.1....~.?..^K....3.h....g..!.J.@..h....i\|..M...(l...Zxo.F.Q7[x...l..v.[:U

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	96705
Entropy (8bit):	5.228470338380378
Encrypted:	false
SSDEEP:	1536:EVpXOWPGHRGUvJEzxPNLgyLuG6XV3yV/QtJ+j1YeO4PFWYit:EVoWPGHRGUvJEzxOMQV3yV/ERaNWYit
MD5:	1DD63DE72CF1F702324245441844BE13
SHA1:	58A8BDCDCB398AF7DB424357DF70DF18E7B30E9D
SHA-256:	5201C813C37A4168CC5C20C701D4391FD0A55625F97EB9F263A74FB52B52FD0E
SHA-512:	532D1E907B433AB97785CF632D9637A957152BAF0BA57879C856CBAA469BFFECA22C4F99485679539944B27068D39E70F7D44282594F999142454DA57329A11B
Malicious:	false
Reputation:	low
URL:	https://az416426.vo.msecnd.net/scripts/a/ai.0.js
Preview:	"use strict";var AI,Microsoft,__extends=this&&this.__extends\|\|function(){var i=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)t.hasOwnProperty(n)&&(e[n]=t[n])};return function(e,t){function n(){this.constructor=e}i(e,t),e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)}}();function _endsWith(e,t){var n=e.length,i=n-t.length;return e.substring(0<=i?i:0,n)===t}!function(e){e.ApplicationInsights\|\|(e.ApplicationInsights={})}(Microsoft\|\|(Microsoft={})),function(e){var t;t=function n(){},(e.Telemetry\|\|(e.Telemetry={})).Base=t}(Microsoft\|\|(Microsoft={})),function(e){var t;t=function n(){this.ver=1,this.sampleRate=100,this.tags={}},(e.Telemetry\|\|(e.Telemetry={})).Envelope=t}(Microsoft\|\|(Microsoft={})),function(e){var t;(t=e.ApplicationInsights\|\|(e.ApplicationInsights={})).Context\|\|(t.Context={})}(Microsoft\|\|(Microsoft={})),function(e){var t;(t=e.ApplicationInsights\|\|(e.ApplicationInsights={})).Context\|\|(t.Co

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	96705
Entropy (8bit):	5.228470338380378
Encrypted:	false
SSDEEP:	1536:EVpXOWPGHRGUvJEzxPNLgyLuG6XV3yV/QtJ+j1YeO4PFWYit:EVoWPGHRGUvJEzxOMQV3yV/ERaNWYit
MD5:	1DD63DE72CF1F702324245441844BE13
SHA1:	58A8BDCDCB398AF7DB424357DF70DF18E7B30E9D
SHA-256:	5201C813C37A4168CC5C20C701D4391FD0A55625F97EB9F263A74FB52B52FD0E
SHA-512:	532D1E907B433AB97785CF632D9637A957152BAF0BA57879C856CBAA469BFFECA22C4F99485679539944B27068D39E70F7D44282594F999142454DA57329A11B
Malicious:	false
Reputation:	low
Preview:	"use strict";var AI,Microsoft,__extends=this&&this.__extends\|\|function(){var i=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)t.hasOwnProperty(n)&&(e[n]=t[n])};return function(e,t){function n(){this.constructor=e}i(e,t),e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)}}();function _endsWith(e,t){var n=e.length,i=n-t.length;return e.substring(0<=i?i:0,n)===t}!function(e){e.ApplicationInsights\|\|(e.ApplicationInsights={})}(Microsoft\|\|(Microsoft={})),function(e){var t;t=function n(){},(e.Telemetry\|\|(e.Telemetry={})).Base=t}(Microsoft\|\|(Microsoft={})),function(e){var t;t=function n(){this.ver=1,this.sampleRate=100,this.tags={}},(e.Telemetry\|\|(e.Telemetry={})).Envelope=t}(Microsoft\|\|(Microsoft={})),function(e){var t;(t=e.ApplicationInsights\|\|(e.ApplicationInsights={})).Context\|\|(t.Context={})}(Microsoft\|\|(Microsoft={})),function(e){var t;(t=e.ApplicationInsights\|\|(e.ApplicationInsights={})).Context\|\|(t.Co

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2295
Entropy (8bit):	7.888481039029385
Encrypted:	false
SSDEEP:	48:7+lCXmsxnSTlnKNCXYL8Z/xQHb8ku6vNRJaD1/tsNErQj1:7+PTlKNC5JQ7zNRJ6Zt54
MD5:	7067FD3F2CDF4DA8858C5DD1695C8314
SHA1:	385BE7A93E70A5A6A44C5B4283DABFCBE11FE83B
SHA-256:	A93F734D47E37E634E7B24741867CD7A08EB62DCE5E7D4C55A93EFBB52322AE0
SHA-512:	7BFA149AA95D6A6CAAE5986185DFB12299C51D74E7EBFA974349EF6A57CEFF4EC6DB10451A9B24AEEB9850ECE8B65FF4C38B3BCEE3E9D92DF066F83069E9B2DC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....gAMA....7.......tEXtSoftware.Adobe ImageReadyq.e<....IDATx.Wkl.W.>wfvg......N.G.&.m.$.....D.T..........@.B..@......m)R#..TU..U..E....6DJp.....S;Y?v...7.3k..MA...3w.=..\|..3...Q.......B....P.....,..T...k..p.e.y...PK.U...N..=..i..0.`.G..PLh..9.%!....\.~.F+[..&..=P....N....4'(.g.....X...=..x.B".^.....FB..5........X..oD0...{.:.:.bsfOg<{r ........m........w'..6V...E....F,2.p^...7i.>..4t..F.G...(..!...;...g.S....s,X..:........%........_...E.V..-{X....6..............^...<.2bD...+........\V=.;..2.[;V....~f...OGj..j)gX...h.!.5..F.^.....>5...e.U...8;zPS.W\..e..^......X......(......2DUI.a.t.<.c..3.^Il.@.../]>.x)....".i.#..#%1L........'..PT ...m.4.D.m.u.. p.q.~..-VJ.KoE8".D$.....O./..D}..,8.l.S.....g..B...((.X2.....-.D...I69....:U...x'=..>.YEM.3.._.>..`..........^.Vs....v..<g...s.]..SF.i..S.mPR.%...e..,.\|.P....40.X..K.._..:TU!T.;.vm.V..[-.N1.X9"J..,......o....Qs..+.A/N.......]].Q.....X...zd...<.G.....D\|.

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 25, 2024 10:00:46.285216093 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 25, 2024 10:00:47.673966885 CEST	49735	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:47.674045086 CEST	443	49735	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:47.674129963 CEST	49735	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:47.674877882 CEST	49735	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:47.674913883 CEST	443	49735	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:47.675348043 CEST	49736	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:47.675395012 CEST	443	49736	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:47.675508976 CEST	49736	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:47.675813913 CEST	49736	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:47.675841093 CEST	443	49736	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:48.297713041 CEST	443	49736	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:48.297982931 CEST	49736	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:48.298005104 CEST	443	49736	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:48.299535990 CEST	443	49736	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:48.299598932 CEST	49736	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:48.301568031 CEST	49736	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:48.301661015 CEST	443	49736	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:48.301789999 CEST	49736	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:48.305840969 CEST	443	49735	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:48.306060076 CEST	49735	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:48.306109905 CEST	443	49735	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:48.307651043 CEST	443	49735	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:48.307749987 CEST	49735	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:48.308984995 CEST	49735	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:48.309073925 CEST	443	49735	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:48.347340107 CEST	443	49736	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:48.353755951 CEST	49736	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:48.353765965 CEST	49735	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:48.353773117 CEST	443	49736	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:48.353790045 CEST	443	49735	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:48.405606985 CEST	49736	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:48.405616999 CEST	49735	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:48.794048071 CEST	443	49736	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:48.794182062 CEST	443	49736	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:48.794239044 CEST	49736	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:48.794852972 CEST	49736	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:48.794886112 CEST	443	49736	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:48.794898033 CEST	49736	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:48.794941902 CEST	49736	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:48.798080921 CEST	49735	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:48.843362093 CEST	443	49735	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:49.268091917 CEST	443	49735	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:49.268346071 CEST	443	49735	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:49.268413067 CEST	49735	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:49.270068884 CEST	49735	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:49.270103931 CEST	443	49735	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:49.270668983 CEST	49739	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:49.270756006 CEST	443	49739	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:49.270855904 CEST	49739	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:49.271070957 CEST	49739	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:49.271117926 CEST	443	49739	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:49.885226965 CEST	443	49739	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:49.929214954 CEST	49739	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:49.932657003 CEST	49739	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:49.932732105 CEST	443	49739	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:49.933221102 CEST	443	49739	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:49.958297968 CEST	49739	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:49.958432913 CEST	443	49739	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:50.009835005 CEST	49739	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:50.040925026 CEST	49739	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:50.087344885 CEST	443	49739	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:50.445940018 CEST	49740	443	192.168.2.4	142.250.186.164
Oct 25, 2024 10:00:50.446007013 CEST	443	49740	142.250.186.164	192.168.2.4
Oct 25, 2024 10:00:50.446091890 CEST	49740	443	192.168.2.4	142.250.186.164
Oct 25, 2024 10:00:50.446297884 CEST	49740	443	192.168.2.4	142.250.186.164
Oct 25, 2024 10:00:50.446331978 CEST	443	49740	142.250.186.164	192.168.2.4
Oct 25, 2024 10:00:50.536761999 CEST	443	49739	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:50.536796093 CEST	443	49739	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:50.536856890 CEST	443	49739	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:50.536927938 CEST	49739	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:50.536992073 CEST	443	49739	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:50.537020922 CEST	443	49739	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:50.537076950 CEST	49739	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:50.537969112 CEST	49739	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:50.537998915 CEST	443	49739	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:50.556145906 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:50.556180954 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:50.556281090 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:50.556968927 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:50.557003975 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:50.671870947 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:00:50.671889067 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 10:00:50.671967983 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:00:50.673468113 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:00:50.673481941 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 10:00:51.170696974 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.171185017 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.171247959 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.171622992 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.171969891 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.172048092 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.172122955 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.219340086 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.311372042 CEST	443	49740	142.250.186.164	192.168.2.4
Oct 25, 2024 10:00:51.312439919 CEST	49740	443	192.168.2.4	142.250.186.164
Oct 25, 2024 10:00:51.312474966 CEST	443	49740	142.250.186.164	192.168.2.4
Oct 25, 2024 10:00:51.313467026 CEST	443	49740	142.250.186.164	192.168.2.4
Oct 25, 2024 10:00:51.313555956 CEST	49740	443	192.168.2.4	142.250.186.164
Oct 25, 2024 10:00:51.314434052 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.314474106 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.314519882 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.314528942 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.314533949 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.314546108 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.314580917 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.314609051 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.314614058 CEST	49740	443	192.168.2.4	142.250.186.164
Oct 25, 2024 10:00:51.314644098 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.314654112 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.314672947 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.314685106 CEST	443	49740	142.250.186.164	192.168.2.4
Oct 25, 2024 10:00:51.314732075 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.314747095 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.315131903 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.315182924 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.315196991 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.361476898 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.361478090 CEST	49740	443	192.168.2.4	142.250.186.164
Oct 25, 2024 10:00:51.361529112 CEST	443	49740	142.250.186.164	192.168.2.4
Oct 25, 2024 10:00:51.407689095 CEST	49740	443	192.168.2.4	142.250.186.164
Oct 25, 2024 10:00:51.433253050 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.433377028 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.433413982 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.433434010 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.433448076 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.433504105 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.433542967 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.433815002 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.433852911 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.433861017 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.433876991 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.433928967 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.433931112 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.433945894 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.434001923 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.434730053 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.434793949 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.434820890 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.434845924 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.434860945 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.434912920 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.434926033 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.435719013 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.435750008 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.435774088 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.435782909 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.435792923 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.435825109 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.436533928 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.436589003 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.436602116 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.483127117 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.538228989 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 10:00:51.538306952 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:00:51.542196989 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:00:51.542206049 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 10:00:51.542606115 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 10:00:51.551702023 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.551770926 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.551801920 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.551820993 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.551851988 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.551882982 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.551901102 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.551911116 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.551950932 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.552234888 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.552294970 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.552336931 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.552345991 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.552885056 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.552941084 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.552947998 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.553766966 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.553813934 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.553822994 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.553865910 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.553874969 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.553881884 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.553909063 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.553929090 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.554775000 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.554826021 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.555634975 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.555674076 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.555685043 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.555691957 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.555721045 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.555795908 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.555840015 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.571428061 CEST	49741	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.571444035 CEST	443	49741	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.591577053 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:00:51.629901886 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:00:51.675323963 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 10:00:51.755945921 CEST	49745	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.755992889 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.756047964 CEST	49745	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.756707907 CEST	49745	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:51.756725073 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:51.875799894 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 10:00:51.875881910 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 10:00:51.875935078 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:00:51.876017094 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:00:51.876053095 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 10:00:51.876079082 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:00:51.876096964 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 10:00:51.921859026 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:00:51.921900034 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 25, 2024 10:00:51.921986103 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:00:51.922370911 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:00:51.922400951 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 25, 2024 10:00:52.378506899 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.388185978 CEST	49745	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:52.388216019 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.389306068 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.394602060 CEST	49745	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:52.394602060 CEST	49745	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:52.394620895 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.395019054 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.442173958 CEST	49745	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:52.534761906 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.534897089 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.534995079 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.535095930 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.535135031 CEST	49745	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:52.535149097 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.535259962 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.535296917 CEST	49745	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:52.535304070 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.535445929 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.535485029 CEST	49745	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:52.535492897 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.537489891 CEST	49745	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:52.539982080 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.545473099 CEST	49745	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:52.545481920 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.601538897 CEST	49745	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:52.653172016 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.653367996 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.653469086 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.653568029 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.653600931 CEST	49745	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:52.653609991 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.653744936 CEST	49745	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:52.653769016 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.653963089 CEST	49745	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:52.653969049 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.654181004 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.654270887 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.654308081 CEST	49745	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:52.654314995 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.654730082 CEST	49745	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:52.654736996 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.655055046 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.655137062 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.655229092 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.655241013 CEST	49745	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:52.655255079 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.655281067 CEST	49745	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:52.655921936 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.656011105 CEST	49745	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:52.656011105 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.656035900 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.656166077 CEST	49745	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:52.656178951 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.656651020 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.656760931 CEST	49745	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:52.656778097 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.708565950 CEST	49745	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:52.772291899 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.772475958 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.772620916 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.772855997 CEST	49745	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:52.773425102 CEST	49745	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:52.773461103 CEST	443	49745	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.778774977 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 25, 2024 10:00:52.781867027 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:00:52.793591976 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:00:52.793636084 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 25, 2024 10:00:52.794502020 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 25, 2024 10:00:52.803352118 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:00:52.847353935 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 25, 2024 10:00:52.970788956 CEST	49749	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:52.970824957 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:52.971082926 CEST	49749	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:52.971082926 CEST	49749	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:52.971112013 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.047774076 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 25, 2024 10:00:53.047919989 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 25, 2024 10:00:53.048711061 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:00:53.048711061 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:00:53.049422979 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:00:53.049462080 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 25, 2024 10:00:53.590897083 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.591341972 CEST	49749	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:53.591363907 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.595138073 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.595237017 CEST	49749	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:53.595638037 CEST	49749	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:53.595809937 CEST	49749	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:53.595820904 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.641364098 CEST	49749	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:53.641372919 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.687746048 CEST	49749	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:53.738583088 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.738713026 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.738778114 CEST	49749	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:53.738790035 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.738863945 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.738912106 CEST	49749	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:53.738919020 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.739010096 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.739053011 CEST	49749	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:53.739068985 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.739167929 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.739219904 CEST	49749	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:53.739228010 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.781660080 CEST	49749	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:53.781672001 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.829235077 CEST	49749	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:53.855911016 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.856090069 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.856153965 CEST	49749	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:53.856168985 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.856391907 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.856441021 CEST	49749	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:53.856447935 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.856553078 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.856601954 CEST	49749	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:53.856607914 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.856750965 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.856805086 CEST	49749	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:53.856820107 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.856854916 CEST	49749	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:53.857660055 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.857877016 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.857923985 CEST	49749	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:53.857930899 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.858046055 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.858091116 CEST	49749	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:53.858098030 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.858567953 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.858620882 CEST	49749	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:53.858628035 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.858727932 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.858783960 CEST	49749	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:53.858792067 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.859433889 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.859491110 CEST	49749	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:53.859498024 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.906893015 CEST	49749	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:53.983002901 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.983206987 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.983292103 CEST	49749	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:53.983320951 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.983494043 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:53.983553886 CEST	49749	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:53.983979940 CEST	49749	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:53.983994007 CEST	443	49749	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:54.312524080 CEST	49754	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:54.312535048 CEST	443	49754	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:54.312586069 CEST	49754	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:54.312936068 CEST	49754	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:54.312948942 CEST	443	49754	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:54.921725988 CEST	443	49754	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:54.922630072 CEST	49754	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:54.922689915 CEST	443	49754	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:54.924258947 CEST	443	49754	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:54.943958998 CEST	49754	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:54.944046974 CEST	49754	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:54.944075108 CEST	443	49754	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:54.944470882 CEST	443	49754	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:54.998827934 CEST	49754	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:55.082499981 CEST	443	49754	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:55.082648993 CEST	443	49754	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:55.082726002 CEST	49754	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:55.082756996 CEST	443	49754	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:55.082880020 CEST	443	49754	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:55.082941055 CEST	49754	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:55.091705084 CEST	49754	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:55.091742992 CEST	443	49754	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:55.110205889 CEST	49757	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:55.110246897 CEST	443	49757	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:55.110477924 CEST	49757	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:55.110558987 CEST	49757	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:55.110569000 CEST	443	49757	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:55.724807978 CEST	443	49757	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:55.725644112 CEST	49757	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:55.725662947 CEST	443	49757	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:55.726754904 CEST	443	49757	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:55.728162050 CEST	49757	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:55.728332043 CEST	443	49757	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:55.728883982 CEST	49757	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:55.771353006 CEST	443	49757	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:55.865605116 CEST	443	49757	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:55.865735054 CEST	443	49757	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:55.865854025 CEST	49757	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:55.865866899 CEST	443	49757	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:55.865999937 CEST	443	49757	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:55.866076946 CEST	49757	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:55.884188890 CEST	49757	443	192.168.2.4	104.26.10.58
Oct 25, 2024 10:00:55.884201050 CEST	443	49757	104.26.10.58	192.168.2.4
Oct 25, 2024 10:00:58.716109991 CEST	49672	443	192.168.2.4	173.222.162.32
Oct 25, 2024 10:00:58.716166019 CEST	443	49672	173.222.162.32	192.168.2.4
Oct 25, 2024 10:01:01.317636013 CEST	443	49740	142.250.186.164	192.168.2.4
Oct 25, 2024 10:01:01.317715883 CEST	443	49740	142.250.186.164	192.168.2.4
Oct 25, 2024 10:01:01.317781925 CEST	49740	443	192.168.2.4	142.250.186.164
Oct 25, 2024 10:01:02.412231922 CEST	49740	443	192.168.2.4	142.250.186.164
Oct 25, 2024 10:01:02.412296057 CEST	443	49740	142.250.186.164	192.168.2.4
Oct 25, 2024 10:01:13.496565104 CEST	80	49723	217.20.57.34	192.168.2.4
Oct 25, 2024 10:01:13.496726990 CEST	49723	80	192.168.2.4	217.20.57.34
Oct 25, 2024 10:01:13.496789932 CEST	49723	80	192.168.2.4	217.20.57.34
Oct 25, 2024 10:01:13.497052908 CEST	80	49723	217.20.57.34	192.168.2.4
Oct 25, 2024 10:01:13.497098923 CEST	49723	80	192.168.2.4	217.20.57.34
Oct 25, 2024 10:01:13.497272015 CEST	80	49723	217.20.57.34	192.168.2.4
Oct 25, 2024 10:01:13.497318029 CEST	49723	80	192.168.2.4	217.20.57.34
Oct 25, 2024 10:01:13.509586096 CEST	80	49723	217.20.57.34	192.168.2.4
Oct 25, 2024 10:01:34.191246033 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:34.191293955 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:34.191433907 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:34.192075014 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:34.192090988 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:34.944881916 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:34.944955111 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:34.948945045 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:34.948954105 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:34.949281931 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:34.957746029 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:34.999381065 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.179627895 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.179652929 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.179733038 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.179738045 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.179784060 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.179826021 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.179856062 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.205526114 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.205554962 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.205602884 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.205612898 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.205656052 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.205684900 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.297730923 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.297755957 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.297806025 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.297835112 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.297885895 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.297885895 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.322508097 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.322530031 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.322573900 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.322585106 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.322630882 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.322632074 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.324424028 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.324444056 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.324481010 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.324491024 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.324527979 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.324573040 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.325814962 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.325843096 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.325910091 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.325917006 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.325930119 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.326000929 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.415677071 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.415702105 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.415818930 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.415831089 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.415870905 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.439434052 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.439459085 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.439570904 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.439570904 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.439604044 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.439735889 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.440567970 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.440588951 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.440639019 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.440649986 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.440677881 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.440784931 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.442039967 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.442060947 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.442121983 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.442130089 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.442199945 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.443006992 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.443027020 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.443099022 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.443109035 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.443226099 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.444163084 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.444183111 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.444303989 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.444312096 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.444370985 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.445105076 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.445126057 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.445271015 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.445280075 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.445409060 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.533199072 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.533289909 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.533289909 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.533385992 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.533531904 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.533531904 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.533546925 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.533559084 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.580869913 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.580955982 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.581053019 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.582005024 CEST	49769	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.582046032 CEST	443	49769	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.582128048 CEST	49769	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.583084106 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.583128929 CEST	49769	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.583153009 CEST	443	49769	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.583161116 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.586318016 CEST	49770	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.586401939 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.586483955 CEST	49770	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.587227106 CEST	49770	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.587263107 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.587676048 CEST	49771	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.587696075 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.588000059 CEST	49771	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.588406086 CEST	49771	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.588423014 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.588972092 CEST	49772	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.589057922 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:35.589163065 CEST	49772	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.589318991 CEST	49772	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:35.589359045 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.312659025 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.313318968 CEST	49772	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.313401937 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.313910961 CEST	49772	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.313966036 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.328985929 CEST	443	49769	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.329437017 CEST	49769	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.329446077 CEST	443	49769	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.329792976 CEST	49769	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.329797983 CEST	443	49769	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.333756924 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.334252119 CEST	49770	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.334336996 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.334626913 CEST	49770	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.334681034 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.336723089 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.337038040 CEST	49771	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.337055922 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.337372065 CEST	49771	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.337378025 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.354480028 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.354923010 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.354984999 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.355289936 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.355344057 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.440213919 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.440236092 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.440284014 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.440320015 CEST	49772	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.440386057 CEST	49772	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.440743923 CEST	49772	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.440745115 CEST	49772	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.440813065 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.440849066 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.444925070 CEST	49773	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.444967031 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.445055962 CEST	49773	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.445236921 CEST	49773	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.445249081 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.465842962 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.465876102 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.465974092 CEST	49770	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.466037035 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.466113091 CEST	49770	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.466260910 CEST	49770	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.466280937 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.466309071 CEST	49770	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.466424942 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.466490984 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.466818094 CEST	49770	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.469352007 CEST	49774	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.469417095 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.469532967 CEST	49774	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.469805002 CEST	49774	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.469883919 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.470021009 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.470072985 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.470138073 CEST	49771	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.470220089 CEST	49771	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.470220089 CEST	49771	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.470241070 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.470254898 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.472507954 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.472536087 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.472598076 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.472735882 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.472742081 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.494169950 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.494199038 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.494277954 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.494338989 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.494379997 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.494416952 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.494513035 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.494513035 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.494513035 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.494566917 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.497328043 CEST	49776	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.497371912 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.497452974 CEST	49776	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.497577906 CEST	443	49769	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.497675896 CEST	443	49769	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.497689009 CEST	49776	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.497697115 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.497786045 CEST	49769	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.497786045 CEST	49769	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.497868061 CEST	49769	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.497879028 CEST	443	49769	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.499954939 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.500061035 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.500157118 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.500322104 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.500350952 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:36.809376001 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:36.809439898 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.186077118 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.186676025 CEST	49773	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.186688900 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.187262058 CEST	49773	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.187267065 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.204096079 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.204689980 CEST	49774	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.204750061 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.205149889 CEST	49774	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.205205917 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.225708961 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.226252079 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.226264000 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.226706028 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.226710081 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.237591982 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.238121986 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.238214970 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.238401890 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.238430023 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.244077921 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.244400024 CEST	49776	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.244426012 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.244784117 CEST	49776	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.244790077 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.322407007 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.322515965 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.322612047 CEST	49773	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.322824955 CEST	49773	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.322840929 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.322855949 CEST	49773	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.322863102 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.326180935 CEST	49778	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.326225042 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.326504946 CEST	49778	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.326750994 CEST	49778	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.326770067 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.336819887 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.336921930 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.337148905 CEST	49774	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.337148905 CEST	49774	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.337148905 CEST	49774	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.341650963 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.341737986 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.342030048 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.342030048 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.342164040 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.361233950 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.361303091 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.361356974 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.361557007 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.361568928 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.361581087 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.361587048 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.364429951 CEST	49780	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.364456892 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.364578962 CEST	49780	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.364748001 CEST	49780	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.364761114 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.370835066 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.370930910 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.371061087 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.371062040 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.371117115 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.371145964 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.373569012 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.373641014 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.373713970 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.373845100 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.373862982 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.383219957 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.383332968 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.383502960 CEST	49776	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.383502960 CEST	49776	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.383534908 CEST	49776	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.383547068 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.385687113 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.385704041 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.385776043 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.385948896 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.385963917 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:37.630740881 CEST	49774	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:37.630805016 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.067356110 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.068623066 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.068706036 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.069417953 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.069668055 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.069683075 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.070821047 CEST	49778	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.070837021 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.071474075 CEST	49778	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.071480989 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.113260031 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.114098072 CEST	49780	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.114113092 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.114945889 CEST	49780	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.114952087 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.120892048 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.121548891 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.121635914 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.125768900 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.125823975 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.132441998 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.135483027 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.135483027 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.135495901 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.135519028 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.198380947 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.198460102 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.198630095 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.199059963 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.199110031 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.199141026 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.199157953 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.201677084 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.201998949 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.202111006 CEST	49778	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.202378035 CEST	49778	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.202378035 CEST	49778	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.202393055 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.202402115 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.205708027 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.205815077 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.205912113 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.206446886 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.206484079 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.207741976 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.207789898 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.207868099 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.208024979 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.208044052 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.244694948 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.244765997 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.245459080 CEST	49780	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.245733023 CEST	49780	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.245754004 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.245909929 CEST	49780	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.245917082 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.251210928 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.251236916 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.251527071 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.251940966 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.251955986 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.263895988 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.264120102 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.264180899 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.264563084 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.264590025 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.264616966 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.264631987 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.268116951 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.268208027 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.268418074 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.268786907 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.268786907 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.268798113 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.268807888 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.273013115 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.273055077 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.273159027 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.273761034 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.273780107 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.276103020 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.276145935 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.276268959 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.276659966 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.276678085 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.930676937 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.931284904 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.931330919 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.931821108 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.931828976 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.958826065 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.959506035 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.959547997 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.959872007 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.959888935 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.996798038 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.997694969 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.997735023 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:38.998071909 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:38.998099089 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.010234118 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.010710955 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.010773897 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.011125088 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.011140108 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.044361115 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.044732094 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.044751883 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.045217037 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.045222998 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.063350916 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.063622952 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.063672066 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.063698053 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.063715935 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.063729048 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.063735962 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.066831112 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.066920042 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.067011118 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.067161083 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.067195892 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.093063116 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.093482971 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.093668938 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.093669891 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.093669891 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.096072912 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.096113920 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.096178055 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.096308947 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.096326113 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.131403923 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.131498098 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.131679058 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.133181095 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.133182049 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.133250952 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.133285046 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.139821053 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.139862061 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.139951944 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.140130997 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.140144110 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.142529011 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.142605066 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.142901897 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.142987967 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.143026114 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.147581100 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.147619009 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.147809029 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.148219109 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.148238897 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.182430983 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.182538033 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.182665110 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.182775974 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.182791948 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.182806969 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.182812929 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.209911108 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.209995985 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.210195065 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.210943937 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.210979939 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.402885914 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.402951002 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.811331034 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.811988115 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.812048912 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.812669992 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.812683105 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.830087900 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.830826998 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.830858946 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.831330061 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.831336975 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.861814022 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.862829924 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.862891912 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.863657951 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.863718033 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.888282061 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.897411108 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.897432089 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.898710012 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.898714066 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.942676067 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.942810059 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.943099976 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.943336010 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.943377018 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.949333906 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.949367046 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.949434996 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.949732065 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.949750900 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.954622030 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.955184937 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.955277920 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.956363916 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.956378937 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.962199926 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.962466002 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.962517977 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.962893009 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.962904930 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.962922096 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.962928057 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.968024015 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.968079090 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.968215942 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.968456984 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.968487978 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.992727995 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.992800951 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.992862940 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.998037100 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.998059988 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:39.998085022 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:39.998097897 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.012356043 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.012394905 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.012461901 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.013498068 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.013514996 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.026427031 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.026635885 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.026689053 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.026998043 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.027008057 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.033833981 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.033874035 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.033957005 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.034568071 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.034595013 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.086432934 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.086493969 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.086698055 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.086785078 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.086822987 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.141103029 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.141135931 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.141232967 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.141602039 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.141618013 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.692017078 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.692627907 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.692663908 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.693188906 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.693195105 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.708476067 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.709930897 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.709960938 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.711595058 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.711622953 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.736826897 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.737314939 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.737351894 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.737867117 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.737874031 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.767061949 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.767991066 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.768034935 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.768863916 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.768879890 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.823690891 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.825203896 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.825285912 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.825416088 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.825434923 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.825470924 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.825476885 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.831243992 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.831285000 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.831604958 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.831845045 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.831862926 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.838614941 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.838697910 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.838874102 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.839025021 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.839071035 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.839104891 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.839123011 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.842968941 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.843003035 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.843133926 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.843435049 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.843451977 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.865389109 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.865504026 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.865566969 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.865866899 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.865879059 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.865900993 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.865909100 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.869036913 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.869122982 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.869232893 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.869559050 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.869668961 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.872555017 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.875292063 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.875319004 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.876694918 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.876702070 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.897660017 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.898078918 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.898188114 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.898189068 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.898276091 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.898313999 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.901834011 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.901856899 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:40.901997089 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.902477980 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:40.902489901 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.003659964 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.003933907 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.003998041 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.004256964 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.004273891 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.008944988 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.009032965 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.009156942 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.009522915 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.009562969 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.559303999 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.563451052 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.563510895 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.564268112 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.564282894 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.591778994 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.599322081 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.599353075 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.600081921 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.600097895 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.622129917 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.622811079 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.622827053 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.623822927 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.623831987 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.640772104 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.641366005 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.641374111 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.645926952 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.645941973 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.691991091 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.692089081 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.692167997 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.692666054 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.692667007 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.692737103 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.692773104 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.695926905 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.695960999 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.696141005 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.696288109 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.696295023 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.723467112 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.723537922 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.723834038 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.723834991 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.723834991 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.726502895 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.726593971 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.726867914 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.726979017 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.727056026 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.752492905 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.753071070 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.753134012 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.753560066 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.753575087 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.761023045 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.761167049 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.761435986 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.761435986 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.761471987 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.761507988 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.764631987 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.764650106 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.764753103 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.764941931 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.764955997 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.775691986 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.775909901 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.775988102 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.776067019 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.776067019 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.776074886 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.776082993 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.778634071 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.778719902 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.779005051 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.779005051 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.779136896 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.886003017 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.886058092 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.886259079 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.886332035 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.886332989 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.886369944 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.886394978 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.889096975 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.889139891 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.889224052 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.889467955 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.889501095 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:41.949672937 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:41.949692011 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.427355051 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.427922010 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.427941084 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.428410053 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.428416967 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.459172964 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.459813118 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.459872961 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.460278988 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.460293055 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.500325918 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.500917912 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.500931978 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.501374960 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.501379013 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.511265993 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.511617899 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.511668921 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.512006044 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.512025118 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.558657885 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.558870077 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.558931112 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.559031963 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.559056997 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.561907053 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.561947107 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.562144995 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.562325001 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.562333107 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.591353893 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.591456890 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.591533899 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.591664076 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.591701984 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.591737986 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.591746092 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.594306946 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.594351053 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.594608068 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.594608068 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.594672918 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.617044926 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.617887974 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.617976904 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.618454933 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.618474960 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.632752895 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.632829905 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.632980108 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.633106947 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.633119106 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.633127928 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.633133888 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.636234999 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.636265993 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.636347055 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.636538982 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.636559010 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.641453028 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.641619921 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.641696930 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.641801119 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.641802073 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.641844988 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.641872883 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.643960953 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.644010067 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.644088984 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.644236088 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.644269943 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.746788979 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.746849060 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.747430086 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.747430086 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.747430086 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.750977039 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.750997066 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:42.751069069 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.751207113 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:42.751223087 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.059031010 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.059051037 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.307830095 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.308402061 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.308413982 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.309165955 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.309181929 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.341685057 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.342284918 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.342344046 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.342885017 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.342899084 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.369028091 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.369497061 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.369556904 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.369931936 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.369946003 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.441203117 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.441432953 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.441515923 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.441557884 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.441557884 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.441574097 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.441582918 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.444593906 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.444653034 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.444876909 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.445058107 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.445086002 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.474380016 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.474450111 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.474545002 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.474632025 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.474653959 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.474668980 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.474675894 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.477350950 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.477386951 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.477462053 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.477622986 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.477638960 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.482177019 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.482553959 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.482561111 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.483061075 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.483064890 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.497107983 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.497342110 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.497415066 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.497543097 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.497570992 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.497596979 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.497610092 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.500686884 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.500768900 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.500863075 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.501076937 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.501116037 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.558521032 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.559144020 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.559161901 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.559752941 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.559758902 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.612008095 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.612068892 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.612124920 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.612337112 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.612348080 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.612374067 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.612379074 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.615432978 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.615449905 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.615530014 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.615703106 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.615715027 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.686952114 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.687014103 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.687074900 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.687346935 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.687376022 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.687453032 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.687458992 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.690797091 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.690829039 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:43.690917015 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.691087961 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:43.691112995 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.178200960 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.178802967 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.178828001 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.179330111 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.179342985 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.208770990 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.209213018 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.209234953 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.209686041 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.209692955 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.240667105 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.241048098 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.241096973 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.241440058 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.241453886 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.307936907 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.308113098 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.308327913 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.308329105 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.308329105 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.312994003 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.313035965 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.313158035 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.313338041 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.313359976 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.338300943 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.338360071 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.339167118 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.339376926 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.339376926 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.339395046 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.339406967 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.343853951 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.343915939 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.344011068 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.344497919 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.344535112 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.525553942 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.525616884 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.559082031 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.559241056 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.559468985 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.559468985 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.559525013 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.559559107 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.561729908 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.562293053 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.562310934 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.562527895 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.562643051 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.562661886 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.562757015 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.562849998 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.562860966 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.563011885 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.563014030 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.563028097 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.563035965 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.563390017 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.563395977 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.692504883 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.692647934 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.692734003 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.692949057 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.692955017 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.694303036 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.694467068 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.694670916 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.694756031 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.694756031 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.694832087 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.694864035 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.697165966 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.697201967 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.697357893 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.699106932 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.699146032 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.699234009 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.699398041 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.699424982 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:44.699568033 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:44.699584007 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.083307028 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.083975077 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.084005117 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.084552050 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.084558964 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.218890905 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.219008923 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.219099045 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.219259024 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.219276905 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.219290972 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.219295979 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.222403049 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.222474098 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.222750902 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.222938061 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.222965002 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.281447887 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.281994104 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.282052994 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.282548904 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.282563925 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.293163061 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.294059992 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.294091940 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.294724941 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.294733047 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.411405087 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.411508083 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.411591053 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.412275076 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.412322998 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.412354946 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.412372112 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.418473005 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.418530941 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.418654919 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.419368029 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.419388056 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.423927069 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.424082041 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.424170017 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.424251080 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.424268007 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.424282074 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.424288034 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.428566933 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.428594112 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.428752899 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.428927898 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.428942919 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.434948921 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.435733080 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.435756922 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.436640024 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.436652899 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.437347889 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.437971115 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.437982082 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.439193964 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.439199924 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.565237045 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.565423012 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.565495968 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.565784931 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.565824032 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.567914963 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.568058014 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.568193913 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.569514036 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.569525957 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.574059010 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.574100018 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.574244022 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.574951887 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.574969053 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.576472998 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.576559067 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.576644897 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.576860905 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.576899052 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.950082064 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.951095104 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.951155901 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:45.951915026 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:45.951930046 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.078612089 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.078768015 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.078845978 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.079440117 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.079495907 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.079545975 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.079564095 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.083970070 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.084054947 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.084321976 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.084552050 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.084577084 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.140767097 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.141423941 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.141446114 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.142347097 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.142354012 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.177478075 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.178586960 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.178651094 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.180090904 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.180146933 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.271038055 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.271270990 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.271354914 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.271399975 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.271414995 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.271440983 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.271446943 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.274403095 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.274441004 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.274542093 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.274728060 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.274746895 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.302566051 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.303112984 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.303124905 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.303502083 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.303512096 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.312660933 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.313028097 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.313056946 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.313102961 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.313221931 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.313267946 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.313325882 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.313332081 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.313345909 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.313350916 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.313450098 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.313462973 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.315713882 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.315773010 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.315895081 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.316075087 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.316108942 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.437006950 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.437062025 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.437169075 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.437604904 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.437604904 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.437617064 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.437625885 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.440831900 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.440879107 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.440944910 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.441205025 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.441219091 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.441705942 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.441850901 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.441911936 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.441956043 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.441976070 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.442004919 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.442018032 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.444221973 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.444247961 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.444421053 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.444538116 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.444566011 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.810436964 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.811150074 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.811187983 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.812004089 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.812017918 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.939412117 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.939543009 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.939640999 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.940191031 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.940226078 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.940253019 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.940270901 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.945770025 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.945796967 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:46.946074963 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.946331978 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:46.946346045 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.006988049 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.008080959 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.008094072 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.009407043 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.009412050 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.090183973 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.129945040 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.129966974 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.131092072 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.131103039 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.138040066 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.138102055 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.138170958 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.138420105 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.138437986 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.138447046 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.138453960 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.143836975 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.143857956 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.143976927 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.144231081 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.144243956 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.168600082 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.169428110 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.169440031 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.170433044 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.170438051 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.182077885 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.182585001 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.182609081 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.183579922 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.183592081 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.262243986 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.262327909 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.262418032 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.262969971 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.263015985 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.263045073 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.263062954 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.269792080 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.269830942 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.269993067 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.270306110 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.270325899 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.299449921 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.299750090 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.299803019 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.300177097 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.300193071 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.310940027 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.311148882 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.311252117 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.311268091 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.311288118 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.311517954 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.311983109 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.311983109 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.312007904 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.312031031 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.313020945 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.313045979 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.315931082 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.315943003 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.316378117 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.318578959 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.318592072 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.678536892 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.679605007 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.679630995 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.680326939 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.680331945 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.807039022 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.807176113 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.807248116 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.807405949 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.807423115 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.807434082 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.807439089 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.810792923 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.810813904 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.810926914 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.811131001 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.811145067 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.878519058 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.879024982 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.879053116 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.879579067 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.879586935 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.994867086 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.995423079 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.995449066 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:47.995928049 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:47.995934963 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.008946896 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.009021044 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.009239912 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.009319067 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.009336948 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.009351015 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.009356976 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.013200045 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.013278008 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.013360977 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.013525009 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.013559103 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.048269987 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.048728943 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.048739910 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.049206972 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.049212933 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.067467928 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.068237066 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.068237066 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.068249941 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.068267107 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.124656916 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.124723911 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.124774933 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.125612974 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.125612974 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.125622034 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.125626087 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.132951021 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.132966995 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.133155107 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.133296967 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.133308887 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.178050995 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.178323030 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.178467035 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.178495884 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.178510904 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.178517103 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.178523064 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.180742979 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.180830002 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.180917978 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.181076050 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.181111097 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.198267937 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.198401928 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.198482990 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.198520899 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.198520899 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.198530912 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.198540926 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.200603962 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.200624943 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.200702906 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.200833082 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.200876951 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.550090075 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.550874949 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.550893068 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.551909924 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.551914930 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.682092905 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.682290077 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.682383060 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.691734076 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.691751957 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.691762924 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.691768885 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.725388050 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.725430012 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.725522995 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.725805044 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.725821018 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.746695042 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.775196075 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.775279045 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.781400919 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.781490088 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.901254892 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.902101040 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.902110100 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.904917955 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.904922962 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.906924009 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.906999111 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.907073975 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.907696009 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.907736063 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.907772064 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.907788038 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.915074110 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.915102959 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.915337086 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.915612936 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.915628910 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.920511007 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.921463966 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.921504974 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.922673941 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.922686100 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.937666893 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.938241005 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.938250065 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:48.939603090 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:48.939608097 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.038436890 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.038531065 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.038621902 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.039244890 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.039257050 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.039264917 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.039268970 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.043416023 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.043457031 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.043710947 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.044301033 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.044318914 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.060666084 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.060830116 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.060899019 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.061137915 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.061137915 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.061171055 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.061197996 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.066045046 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.066082954 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.066144943 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.066395044 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.066412926 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.067742109 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.067910910 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.068025112 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.068099976 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.068099976 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.068115950 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.068126917 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.071032047 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.071115017 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.071190119 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.071348906 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.071383953 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.486690998 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.487174988 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.487205029 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.487775087 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.487781048 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.619041920 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.619096041 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.619151115 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.619163990 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.619215012 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.619266987 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.619450092 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.619462967 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.619477034 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.619482994 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.622678995 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.622715950 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.622955084 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.623051882 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.623063087 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.644987106 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.645471096 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.645488977 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.645874023 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.645879030 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.775590897 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.775652885 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.775788069 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.775845051 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.775963068 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.775978088 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.775995016 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.776001930 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.776422024 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.776439905 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.776947975 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.776953936 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.779480934 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.779517889 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.779593945 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.779799938 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.779814959 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.806746006 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.807143927 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.807163000 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.807554007 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.807570934 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.819025993 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.819365025 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.819396019 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.819747925 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.819756031 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.907088041 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.907341003 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.907391071 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.907607079 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.907614946 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.907629013 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.907634020 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.910996914 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.911052942 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.911159992 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.911403894 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.911428928 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.936250925 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.936297894 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.936400890 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.936402082 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.936480045 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.936623096 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.936623096 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.936652899 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.936665058 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.942117929 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.942168951 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.942408085 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.942552090 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.942579985 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.951102018 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.951149940 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.951208115 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.951220036 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.951261997 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.951266050 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.951319933 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.951740026 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.951750994 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.955007076 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.955050945 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:49.955144882 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.955379009 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:49.955405951 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:50.376266003 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:50.376859903 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:50.376884937 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:50.377460957 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:50.377476931 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:50.497371912 CEST	49855	443	192.168.2.4	142.250.186.164
Oct 25, 2024 10:01:50.497395039 CEST	443	49855	142.250.186.164	192.168.2.4
Oct 25, 2024 10:01:50.497674942 CEST	49855	443	192.168.2.4	142.250.186.164
Oct 25, 2024 10:01:50.498133898 CEST	49855	443	192.168.2.4	142.250.186.164
Oct 25, 2024 10:01:50.498150110 CEST	443	49855	142.250.186.164	192.168.2.4
Oct 25, 2024 10:01:50.512665033 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:50.512722969 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:50.512828112 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:50.512830019 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:50.512881041 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:50.513102055 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:50.513102055 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:50.513118982 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:50.513128042 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:50.514693975 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:50.515218019 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:50.515233994 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:50.515893936 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:50.515902042 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:50.516638041 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:50.516695976 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:50.516917944 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:50.517060995 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:50.517091036 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:50.846245050 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:50.846386909 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:50.846467972 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:50.846642017 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:50.846682072 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:50.846712112 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:50.846729040 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:50.848845959 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:50.849303961 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:50.849318981 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:50.849936008 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:50.849941969 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:50.850389957 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:50.850420952 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:50.850488901 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:50.850684881 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:50.850698948 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:50.854948997 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:50.855346918 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:50.855427027 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:50.855895996 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:50.855910063 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:50.996469021 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:50.996563911 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:50.996639013 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:50.996809959 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:50.996901035 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:50.996923923 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:50.996937990 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:50.997066975 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:50.997158051 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:50.997158051 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:50.997201920 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:50.997234106 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.000730991 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.000754118 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.000814915 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.000839949 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.000859022 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.000950098 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.001132011 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.001157045 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.001190901 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.001218081 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.001230955 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.001574039 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.001581907 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.002084970 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.002089977 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.154824018 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.155002117 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.155185938 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.155339956 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.155359030 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.155370951 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.155376911 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.158777952 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.158859968 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.158946991 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.159148932 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.159183025 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.251780987 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.252306938 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.252398014 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.253057003 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.253072023 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.355149984 CEST	443	49855	142.250.186.164	192.168.2.4
Oct 25, 2024 10:01:51.355616093 CEST	49855	443	192.168.2.4	142.250.186.164
Oct 25, 2024 10:01:51.355628967 CEST	443	49855	142.250.186.164	192.168.2.4
Oct 25, 2024 10:01:51.356712103 CEST	443	49855	142.250.186.164	192.168.2.4
Oct 25, 2024 10:01:51.357150078 CEST	49855	443	192.168.2.4	142.250.186.164
Oct 25, 2024 10:01:51.357320070 CEST	443	49855	142.250.186.164	192.168.2.4
Oct 25, 2024 10:01:51.402343035 CEST	49855	443	192.168.2.4	142.250.186.164
Oct 25, 2024 10:01:51.420875072 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.421037912 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.421117067 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.421271086 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.421322107 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.421354055 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.421370983 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.424562931 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.424603939 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.424679995 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.424844980 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.424860954 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.597948074 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.598562956 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.598587036 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.599247932 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.599253893 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.728689909 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.729156017 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.729240894 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.729300976 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.729314089 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.729330063 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.729336023 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.732492924 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.732543945 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.732618093 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.732777119 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.732795000 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.733467102 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.733880997 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.733886957 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.734481096 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.734487057 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.749984980 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.750471115 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.750535965 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.750982046 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.750998974 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.865087986 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.865160942 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.865297079 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.865567923 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.865593910 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.865616083 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.865626097 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.869126081 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.869160891 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.869374037 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.869399071 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.869405031 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.881017923 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.881171942 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.881339073 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.881429911 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.881429911 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.881447077 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.881469011 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.884512901 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.884576082 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.884716034 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.884888887 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.884922981 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.925223112 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.925877094 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.925898075 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:51.926501989 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:51.926507950 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.057046890 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.057197094 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.057415962 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.057509899 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.057519913 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.057543039 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.057549953 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.060643911 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.060667992 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.060864925 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.061100006 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.061111927 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.152112007 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.152915001 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.152935982 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.153307915 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.153314114 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.280559063 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.280708075 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.280787945 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.281033039 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.281033039 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.281054020 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.281061888 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.284436941 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.284477949 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.284692049 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.284885883 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.284902096 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.527827978 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.528609991 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.528630018 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.529831886 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.529839039 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.621511936 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.622859001 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.622859001 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.622895956 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.622908115 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.629995108 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.630882978 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.630882978 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.630899906 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.630908012 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.664339066 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.664412975 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.664511919 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.664558887 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.664761066 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.664761066 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.664809942 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.664840937 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.668194056 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.668210983 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.668376923 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.668535948 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.668545008 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.751985073 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.764949083 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.765001059 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.765721083 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.765721083 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.765819073 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.765832901 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.768491983 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.768536091 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.768685102 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.768866062 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.768879890 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.788683891 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.789360046 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.789381981 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.789870977 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.789876938 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.793982983 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.794012070 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.797739983 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.797740936 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.797775030 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.798121929 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.798161983 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.798367023 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.799974918 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.800014019 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.800115108 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.801628113 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.801645041 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.916666985 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.916816950 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.917037010 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.917037964 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.917134047 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.917143106 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.921504974 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.921591043 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:52.926074028 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.926074028 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:52.926151991 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.032244921 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.034406900 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.034420967 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.037513971 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.037518978 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.165282965 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.165822983 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.166033983 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.166033983 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.166033983 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.173619986 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.173671007 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.177858114 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.177858114 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.177901030 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.403075933 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.409311056 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.409339905 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.410269976 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.410274982 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.465034962 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.465068102 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.501344919 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.516602039 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.516623020 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.517838001 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.517846107 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.535486937 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.535701990 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.535775900 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.536119938 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.536139965 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.536158085 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.536165953 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.551999092 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.558868885 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.558912992 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.559056997 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.559722900 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.559751034 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.560523033 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.560529947 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.641751051 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.641788006 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.644785881 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.644860983 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.644983053 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.645056963 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.645302057 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.645339012 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.645370960 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.645385981 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.675559044 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.677926064 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.677944899 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.678594112 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.678605080 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.681968927 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.681999922 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.682188034 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.682365894 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.682385921 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.689492941 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.689654112 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.689728975 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.696235895 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.696258068 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.771938086 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.771967888 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.772074938 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.785231113 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.785244942 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.809184074 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.809322119 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.809411049 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.811856985 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.811875105 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.881819010 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.881864071 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.881959915 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.882719994 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.882750034 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.933114052 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.933547974 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.933562040 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:53.934302092 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:53.934309006 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.065793037 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.065944910 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.066009045 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.066179991 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.066199064 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.066210032 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.066216946 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.069317102 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.069340944 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.069407940 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.069637060 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.069654942 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.396996021 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.397665024 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.397686005 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.398513079 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.398519039 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.435379028 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.436085939 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.436115026 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.436990023 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.436997890 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.520765066 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.521744967 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.521764040 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.522628069 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.522634983 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.529608011 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.529674053 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.529763937 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.529813051 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.529854059 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.530581951 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.530599117 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.530611038 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.530616999 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.536650896 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.536693096 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.536807060 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.537379980 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.537396908 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.569957018 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.570188046 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.570264101 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.570652008 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.570667028 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.570687056 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.570693970 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.576421022 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.576458931 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.576606989 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.576786995 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.576805115 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.616718054 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.617345095 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.617367983 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.618113995 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.618119955 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.669665098 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.669744015 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.669801950 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.669862032 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.670280933 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.670289040 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.670346022 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.670351028 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.674772024 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.674798012 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.674865961 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.675204039 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.675226927 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.745341063 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.745584011 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.745657921 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.745959997 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.745980024 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.746010065 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.746023893 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.753954887 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.753988028 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.754050016 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.754669905 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.754684925 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.802037001 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.802771091 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.802792072 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.803576946 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.803584099 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.930763006 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.930907011 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.931085110 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.936315060 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.936328888 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.958842039 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.958919048 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:54.959002018 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.959300995 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:54.959343910 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.289006948 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.290662050 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:55.290720940 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.292675972 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:55.292690992 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.326055050 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.327537060 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:55.327557087 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.328099966 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:55.328107119 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.421371937 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.421525955 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.421741962 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:55.421741962 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:55.421741962 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:55.423285007 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.423800945 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:55.423882008 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.424243927 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:55.424259901 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.425347090 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:55.425384045 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.425461054 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:55.425641060 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:55.425653934 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.464910984 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.464977980 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.465040922 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:55.465055943 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.465089083 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.465151072 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:55.465292931 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:55.465308905 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.465320110 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:55.465327024 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.467653990 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:55.467741966 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.467854023 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:55.467998981 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:55.468030930 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.508651972 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.509084940 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:55.509103060 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.509525061 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:55.509530067 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.554702044 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.555031061 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.555098057 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:55.555154085 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:55.555169106 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.555185080 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:55.555191994 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.559005976 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:55.559039116 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.559309959 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:55.559464931 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:55.559479952 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.639007092 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.639657974 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.639723063 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:55.639795065 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:55.639811993 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.639821053 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:55.639826059 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.642823935 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:55.642867088 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.643176079 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:55.643362045 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:55.643376112 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:55.724602938 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:55.724616051 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.161768913 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.162590981 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.162612915 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.163680077 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.163690090 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.207093954 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.207717896 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.207768917 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.208298922 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.208333015 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.290930986 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.291017056 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.291105986 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.291119099 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.291141987 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.291276932 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.291673899 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.291686058 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.298346996 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.298399925 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.298489094 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.298916101 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.298933983 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.311526060 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.312282085 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.312299013 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.313241959 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.313257933 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.338381052 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.338449955 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.338568926 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.344491005 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.344491959 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.344528913 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.344554901 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.350344896 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.350394964 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.350498915 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.350897074 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.350917101 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.392793894 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.397547960 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.397561073 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.398468971 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.398474932 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.443598986 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.443747997 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.443840981 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.444195986 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.444215059 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.444272995 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.444279909 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.450182915 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.450218916 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.450288057 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.450885057 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.450903893 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.467772961 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.468229055 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.468270063 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.469060898 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.469074011 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.532619953 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.532766104 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.532919884 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.533140898 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.533164978 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.533179045 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.533185959 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.537081957 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.537158012 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.537379980 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.537574053 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.537606001 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.604552031 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.604708910 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.604782104 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.604990959 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.605015993 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.605048895 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.605062962 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.613470078 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.613492012 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:56.613781929 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.614026070 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:56.614042997 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.072040081 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.072844028 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.072860956 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.073349953 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.073359013 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.093223095 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.093759060 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.093842983 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.094258070 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.094273090 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.197940111 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.198647022 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.198678970 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.199580908 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.199589014 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.211191893 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.212160110 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.212203026 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.212254047 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.212428093 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.212449074 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.212461948 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.212469101 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.214899063 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.214948893 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.215157986 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.215524912 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.215548038 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.225481987 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.225636959 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.225701094 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.225779057 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.225811005 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.225838900 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.225852966 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.228132963 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.228172064 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.228250027 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.228410006 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.228426933 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.281908035 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.282438040 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.282500982 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.282897949 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.282912970 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.330506086 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.330674887 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.330743074 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.330928087 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.330945015 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.330960989 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.330967903 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.333920956 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.334012032 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.334110022 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.334264040 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.334285021 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.339701891 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.340991974 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.341001987 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.341526031 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.341531992 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.411408901 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.411560059 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.412447929 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.412503958 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.412522078 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.412535906 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.412543058 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.417373896 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.417428017 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.417520046 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.417891026 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.417908907 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.469049931 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.469119072 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.469188929 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.469202042 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.469223022 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.469271898 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.469605923 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.469614983 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.476106882 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.476147890 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.476367950 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.476638079 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.476655006 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.963726997 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.964319944 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.964349985 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.964848995 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.964857101 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.995349884 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.995997906 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.996027946 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:57.996623039 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:57.996629000 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.073290110 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.073822021 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.073884010 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.074307919 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.074325085 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.096616030 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.096792936 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.096894979 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.097076893 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.097094059 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.097106934 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.097114086 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.100888014 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.100922108 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.101078033 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.101326942 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.101341009 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.129961014 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.129992008 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.130039930 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.130079985 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.130079985 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.130378008 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.130378008 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.130397081 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.130405903 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.133488894 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.133532047 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.133627892 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.133810043 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.133838892 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.168642044 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.169176102 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.169189930 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.169678926 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.169684887 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.203361034 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.203516960 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.203629971 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.203685999 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.203685999 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.203717947 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.203744888 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.206537962 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.206562996 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.206624031 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.206759930 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.206765890 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.213217020 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.213572979 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.213607073 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.214015007 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.214025021 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.302028894 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.302090883 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.302186966 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.302264929 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.302344084 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.302344084 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.302356958 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.302361012 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.305146933 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.305165052 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.305419922 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.305530071 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.305536032 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.342881918 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.342945099 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.343009949 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.343224049 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.343233109 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.343246937 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.343252897 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.346409082 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.346447945 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.346606016 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.346863985 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.346879959 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.828221083 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.828875065 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.828891039 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.829366922 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.829372883 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.880764008 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.881275892 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.881304026 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.881763935 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.881776094 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.955816984 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.956293106 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.956311941 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.956746101 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.956751108 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.957017899 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.957168102 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.957267046 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.957282066 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.957324982 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.957386971 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.957401037 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.957415104 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.957420111 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.960227966 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.960316896 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:58.960422993 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.960561991 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:58.960585117 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.013442993 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.013613939 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.013807058 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.013902903 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.013902903 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.013947010 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.013978958 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.016845942 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.016886950 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.017085075 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.017241001 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.017261028 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.043292999 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.043809891 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.043869972 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.044276953 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.044332027 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.085338116 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.085747957 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.085758924 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.086225986 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.086230993 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.087018013 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.087088108 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.087142944 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.087153912 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.087210894 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.087264061 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.087291956 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.087301970 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.087316990 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.087321043 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.090289116 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.090373993 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.090472937 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.090594053 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.090614080 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.176362038 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.176556110 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.176636934 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.176793098 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.176793098 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.176842928 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.176872969 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.180023909 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.180109024 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.180200100 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.180370092 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.180392027 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.217103004 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.217257023 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.217319965 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.217453957 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.217473030 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.217483044 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.217489958 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.220627069 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.220659971 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.220720053 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.220875025 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.220890045 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.711599112 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.712281942 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.712321997 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.712774992 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.712784052 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.778158903 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.778722048 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.778740883 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.779284954 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.779289007 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.845563889 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.845711946 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.845778942 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.846004009 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.846019030 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.846055984 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.846064091 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.849241972 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.849327087 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.849579096 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.849764109 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.849797010 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.887456894 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.888057947 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.888148069 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.888425112 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.888441086 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.911633968 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.911703110 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.911798954 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.911801100 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.911854029 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.911931992 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.911948919 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.911957026 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.911962032 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.914870977 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.914907932 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.914963961 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.915158033 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.915173054 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.919380903 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.919821024 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.919894934 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.920300961 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.920315027 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.951431990 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.951800108 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.951817989 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 25, 2024 10:01:59.952203035 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:01:59.952208042 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.020965099 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.021119118 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.021193981 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.021291971 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.021311998 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.021358967 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.021367073 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.023920059 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.023941040 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.024013042 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.024178982 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.024195910 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.047235012 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.047333956 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.047405958 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.047435045 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.047466993 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.047527075 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.047694921 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.047728062 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.047753096 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.047766924 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.050669909 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.050705910 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.050811052 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.050952911 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.050967932 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.087697983 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.087846994 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.087927103 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.087997913 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.088013887 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.088023901 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.088028908 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.091005087 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.091090918 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.091188908 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.091353893 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.091383934 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.601205111 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.602050066 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.602094889 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.602889061 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.602902889 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.657865047 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.658585072 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.658610106 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.659836054 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.659842014 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.730530024 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.730839968 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.730932951 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.731455088 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.731477022 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.737287045 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.737335920 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.737473011 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.737823963 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.737840891 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.761459112 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.761986971 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.762041092 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.762588024 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.762602091 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.796786070 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.796911001 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.797079086 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.797220945 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.797235966 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.797249079 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.797255039 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.798439980 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.799366951 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.799376965 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.800328970 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.800345898 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.803446054 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.803472996 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.803653002 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.803909063 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.803920031 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.835028887 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.852123022 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.852161884 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.853740931 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.853751898 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.890218019 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.890281916 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.890382051 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.890429020 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.890466928 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.890800953 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.890826941 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.897001028 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.897026062 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.897140980 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.897442102 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.897459030 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.938502073 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.939953089 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.940052032 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.940284014 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.940301895 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.940315008 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.940320015 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.945168972 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.945213079 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.945285082 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.945761919 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.945789099 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.999279022 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.999381065 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.999488115 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.999541044 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.999629021 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.999809027 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.999809027 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:00.999830008 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:00.999850988 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.003767014 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.003777981 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.003856897 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.004075050 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.004085064 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.347815037 CEST	443	49855	142.250.186.164	192.168.2.4
Oct 25, 2024 10:02:01.347953081 CEST	443	49855	142.250.186.164	192.168.2.4
Oct 25, 2024 10:02:01.348020077 CEST	49855	443	192.168.2.4	142.250.186.164
Oct 25, 2024 10:02:01.499237061 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.499793053 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.499811888 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.500411034 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.500416040 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.556523085 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.557097912 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.557132006 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.557665110 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.557720900 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.630618095 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.630772114 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.630872965 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.631083965 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.631083965 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.631114960 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.631124020 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.634279966 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.634367943 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.634455919 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.634669065 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.634691954 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.664459944 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.664968967 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.664987087 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.665461063 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.665467978 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.687922001 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.688399076 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.688446045 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.688853025 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.688864946 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.689157009 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.689227104 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.689289093 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.689505100 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.689518929 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.689532995 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.689538956 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.692584991 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.692630053 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.692744970 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.692888021 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.692899942 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.769320965 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.769896984 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.769906998 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.770390987 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.770395041 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.796149015 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.796308994 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.796386957 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.796576023 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.796586990 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.796632051 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.796637058 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.799623013 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.799695015 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.799844027 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.800030947 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.800048113 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.817276001 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.817740917 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.817811012 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.817878008 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.817900896 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.817925930 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.817938089 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.820502996 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.820528984 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.820599079 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.820768118 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.820774078 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.898716927 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.898855925 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.898962975 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.899461031 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.899472952 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.907275915 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.907370090 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:01.907474995 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.907912970 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:01.907944918 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.373358011 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.374748945 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.374790907 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.375801086 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.375808954 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.389312983 CEST	49855	443	192.168.2.4	142.250.186.164
Oct 25, 2024 10:02:02.389329910 CEST	443	49855	142.250.186.164	192.168.2.4
Oct 25, 2024 10:02:02.445086002 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.446132898 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.446156025 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.446904898 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.446911097 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.505043030 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.505191088 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.505281925 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.505659103 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.505705118 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.505737066 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.505753994 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.511749029 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.511789083 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.511877060 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.512296915 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.512311935 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.549705029 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.550411940 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.550474882 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.550929070 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.550944090 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.570621014 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.571103096 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.571119070 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.571723938 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.571729898 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.577404022 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.577487946 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.577543020 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.577799082 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.577814102 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.577826023 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.577832937 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.581986904 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.582041025 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.582412004 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.582685947 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.582714081 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.647777081 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.648443937 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.648477077 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.649300098 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.649312019 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.681564093 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.681649923 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.681720018 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.681751966 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.681817055 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.681906939 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.681948900 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.681978941 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.681994915 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.687519073 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.687551022 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.687792063 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.688031912 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.688045979 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.699413061 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.699796915 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.699866056 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.700016975 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.700026989 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.703102112 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.703183889 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.703398943 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.703627110 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.703664064 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.788157940 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.788422108 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.788503885 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.788696051 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.788696051 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.788732052 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.788757086 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.794641018 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.794682980 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:02.794754028 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.795190096 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:02.795207024 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.289933920 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.291290045 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.291305065 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.292838097 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.292844057 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.327866077 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.329133034 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.329165936 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.330084085 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.330101013 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.428127050 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.428734064 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.428800106 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.428888083 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.428910017 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.428919077 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.428925991 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.434313059 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.434370041 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.434444904 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.434956074 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.434986115 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.455960035 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.456549883 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.456559896 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.457787037 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.457792044 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.458295107 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.459022045 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.459038019 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.459248066 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.459300995 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.459376097 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.459403038 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.459454060 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.459531069 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.459707022 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.459718943 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.459865093 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.459892988 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.459918022 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.459932089 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.465006113 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.465042114 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.465189934 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.465506077 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.465521097 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.532363892 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.533166885 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.533190012 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.534271002 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.534276009 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.588264942 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.588346958 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.588479042 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.588555098 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.588721037 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.588941097 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.588942051 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.588985920 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.589014053 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.593101025 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.593136072 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.593189001 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.593261957 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.594533920 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.594625950 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.594806910 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.594821930 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.594855070 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.596882105 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.596919060 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.599786043 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.599821091 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.600034952 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.600404978 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.600419044 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.662775993 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.662918091 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.662971973 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.664390087 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.664402962 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.664414883 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.664421082 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.674104929 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.674160004 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:03.674235106 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.674918890 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:03.674949884 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.185848951 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.203108072 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.203192949 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.215687037 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.221518993 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.221571922 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.222584009 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.222599030 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.223191977 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.223196983 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.331324100 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.331768990 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.331783056 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.332211971 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.332216978 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.345356941 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.345927954 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.346000910 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.346343040 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.346362114 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.348043919 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.348208904 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.348269939 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.348298073 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.348321915 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.348334074 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.348340988 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.349033117 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.349186897 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.349272966 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.349292994 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.349497080 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.349497080 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.349498034 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.349581003 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.351409912 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.351438999 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.351500988 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.351537943 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.351591110 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.351686001 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.351699114 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.351710081 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.351846933 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.351883888 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.411938906 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.412446976 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.412468910 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.412986994 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.413000107 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.460505009 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.460638046 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.460699081 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.460767984 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.460925102 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.460972071 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.460980892 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.460989952 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.460994959 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.463988066 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.464045048 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.464114904 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.464250088 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.464271069 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.479572058 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.479613066 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.479680061 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.479742050 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.479794025 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.479826927 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.479854107 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.479887009 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.482433081 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.482474089 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.482563972 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.482707977 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.482738972 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.544071913 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.544145107 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.544222116 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.544248104 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.544280052 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.544333935 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.544533968 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.544557095 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.544580936 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.544593096 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.547540903 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.547573090 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.547749996 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.547940016 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.547956944 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:04.652631044 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:04.652682066 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.095010996 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.095705032 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.095793009 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.096080065 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.096096039 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.132420063 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.132843971 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.132860899 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.133251905 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.133258104 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.201898098 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.202485085 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.202514887 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.202974081 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.202986956 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.221246004 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.221780062 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.221837044 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.222410917 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.222425938 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.227798939 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.227885962 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.228075981 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.228151083 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.228188992 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.228204012 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.228219032 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.231343985 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.231373072 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.231434107 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.231560946 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.231571913 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.268277884 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.268446922 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.268521070 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.268578053 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.268587112 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.268595934 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.268599987 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.271275043 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.271362066 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.271559954 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.271862030 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.271898031 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.295288086 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.295705080 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.295722961 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.296288967 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.296299934 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.333492041 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.333570004 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.333749056 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.333843946 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.333859921 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.334001064 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.334007978 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.336896896 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.336925983 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.337068081 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.337217093 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.337229967 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.353794098 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.353887081 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.353950977 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.353965998 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.354022980 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.354068041 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.354083061 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.354099989 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.354108095 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.354120970 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.354125023 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.356749058 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.356796980 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.356897116 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.357013941 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.357038021 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.580418110 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.580502987 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.580621004 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.580794096 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.580810070 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.580904961 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.580912113 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.584017992 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.584045887 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:05.584233999 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.584435940 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:05.584453106 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.008927107 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.009536028 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.009577036 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.010113955 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.010128021 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.010349035 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.010668039 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.010700941 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.011075974 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.011081934 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.081585884 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.082133055 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.082144976 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.082617998 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.082623005 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.099987030 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.100439072 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.100461006 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.100845098 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.100857019 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.140188932 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.140357018 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.140430927 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.140593052 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.140593052 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.140625000 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.140666008 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.143652916 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.143722057 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.143871069 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.143965960 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.143985033 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.150549889 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.151262999 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.151309967 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.151325941 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.151384115 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.151417971 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.151447058 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.151463032 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.151463032 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.151473045 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.151483059 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.153515100 CEST	49942	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.153554916 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.153906107 CEST	49942	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.153906107 CEST	49942	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.153938055 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.218116045 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.218183994 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.218282938 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.218359947 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.218497992 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.218507051 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.218521118 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.218527079 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.221676111 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.221716881 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.221805096 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.221959114 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.221983910 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.230124950 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.230493069 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.230595112 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.230659008 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.230675936 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.230705976 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.230719090 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.233526945 CEST	49944	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.233582973 CEST	443	49944	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.233721018 CEST	49944	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.233874083 CEST	49944	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.233889103 CEST	443	49944	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.316212893 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.316715002 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.316740990 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.317125082 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.317130089 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.642817020 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.642885923 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.642946005 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.643369913 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.643388033 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.643397093 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.643403053 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.646658897 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.646758080 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.646862030 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.647006989 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.647042990 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.870455027 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.871043921 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.871083021 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.871558905 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.871572018 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.903412104 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.903858900 CEST	49942	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.903877020 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.904406071 CEST	49942	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.904412031 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.975024939 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.975545883 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.975581884 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.976111889 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.976124048 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.979801893 CEST	443	49944	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.980146885 CEST	49944	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.980169058 CEST	443	49944	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:06.980547905 CEST	49944	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:06.980554104 CEST	443	49944	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.001528025 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.001590967 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.001658916 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.001852036 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.001852036 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.001883984 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.001909971 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.004982948 CEST	49946	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.005017042 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.005126953 CEST	49946	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.005269051 CEST	49946	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.005283117 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.035693884 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.035851002 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.035953999 CEST	49942	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.036079884 CEST	49942	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.036079884 CEST	49942	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.036098003 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.036099911 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.038671017 CEST	49947	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.038726091 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.038811922 CEST	49947	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.038991928 CEST	49947	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.039020061 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.118048906 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.118196964 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.118257999 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.118402004 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.118412971 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.118427038 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.118432999 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.121160984 CEST	49948	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.121192932 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.121258020 CEST	49948	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.121449947 CEST	49948	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.121454954 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.122334957 CEST	443	49944	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.124706030 CEST	443	49944	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.124757051 CEST	49944	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.124767065 CEST	443	49944	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.124824047 CEST	443	49944	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.124860048 CEST	49944	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.124860048 CEST	49944	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.124878883 CEST	443	49944	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.124886990 CEST	49944	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.124901056 CEST	443	49944	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.127273083 CEST	49949	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.127307892 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.127371073 CEST	49949	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.127477884 CEST	49949	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.127487898 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.382188082 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.382850885 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.382894993 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.383460999 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.383474112 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.526441097 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.526599884 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.526701927 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.526900053 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.526901007 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.526931047 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.526961088 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.530122042 CEST	49950	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.530162096 CEST	443	49950	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.530234098 CEST	49950	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.530447006 CEST	49950	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.530462980 CEST	443	49950	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.750792980 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.755980015 CEST	49946	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.755994081 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.759510994 CEST	49946	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.759516954 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.788625002 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.789433002 CEST	49947	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.789433002 CEST	49947	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.789475918 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.789499998 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.863044977 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.863770008 CEST	49949	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.863790989 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.864434004 CEST	49949	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.864439964 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.869604111 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.875515938 CEST	49948	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.875543118 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.876437902 CEST	49948	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.876446009 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.889225960 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.889301062 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.889414072 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.889448881 CEST	49946	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.889699936 CEST	49946	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.889745951 CEST	49946	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.889745951 CEST	49946	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.889764071 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.889771938 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.895514011 CEST	49951	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.895536900 CEST	443	49951	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.895934105 CEST	49951	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.896131039 CEST	49951	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.896135092 CEST	443	49951	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.920726061 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.920866013 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.920945883 CEST	49947	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.921181917 CEST	49947	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.921205044 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.921972990 CEST	49947	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.921988010 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.923758030 CEST	49952	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.923794031 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.923929930 CEST	49952	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.924057961 CEST	49952	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.924068928 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.995197058 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.995280981 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.995373964 CEST	49949	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.995646954 CEST	49949	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.995661974 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.995688915 CEST	49949	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.995693922 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.998476028 CEST	49953	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.998553991 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:07.998689890 CEST	49953	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.998852015 CEST	49953	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:07.998888969 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.005353928 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.005419970 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.005517006 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.005522966 CEST	49948	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.005606890 CEST	49948	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.005671978 CEST	49948	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.005671978 CEST	49948	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.005692005 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.005702019 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.007738113 CEST	49954	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.007755041 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.008222103 CEST	49954	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.008374929 CEST	49954	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.008387089 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.261226892 CEST	443	49950	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.261858940 CEST	49950	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.261881113 CEST	443	49950	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.262337923 CEST	49950	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.262351036 CEST	443	49950	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.391762972 CEST	443	49950	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.391798973 CEST	443	49950	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.391848087 CEST	443	49950	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.391904116 CEST	49950	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.391999960 CEST	49950	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.392271042 CEST	49950	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.392271042 CEST	49950	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.392292976 CEST	443	49950	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.392302990 CEST	443	49950	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.395474911 CEST	49955	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.395566940 CEST	443	49955	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.395873070 CEST	49955	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.395873070 CEST	49955	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.395961046 CEST	443	49955	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.632157087 CEST	443	49951	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.632747889 CEST	49951	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.632767916 CEST	443	49951	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.633222103 CEST	49951	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.633234024 CEST	443	49951	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.649800062 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.650321007 CEST	49952	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.650341988 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.650787115 CEST	49952	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.650794029 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.745007992 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.745665073 CEST	49953	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.745691061 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.746202946 CEST	49953	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.746216059 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.756541014 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.757214069 CEST	49954	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.757225037 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.757704973 CEST	49954	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.757710934 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.763411999 CEST	443	49951	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.764002085 CEST	443	49951	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.764096022 CEST	49951	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.764214993 CEST	49951	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.764226913 CEST	443	49951	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.764236927 CEST	49951	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.764241934 CEST	443	49951	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.767916918 CEST	49956	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.767959118 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.768145084 CEST	49956	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.768181086 CEST	49956	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.768189907 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.776796103 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.776846886 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.776952028 CEST	49952	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.776961088 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.776979923 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.777033091 CEST	49952	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.777143002 CEST	49952	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.777156115 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.777169943 CEST	49952	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.777178049 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.779869080 CEST	49957	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.779958010 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.780045986 CEST	49957	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.780211926 CEST	49957	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.780245066 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.878384113 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.878412962 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.878489971 CEST	49953	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.878498077 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.878561974 CEST	49953	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.878823042 CEST	49953	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.878859043 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.878887892 CEST	49953	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.878902912 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.881879091 CEST	49958	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.881922007 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.882080078 CEST	49958	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.882252932 CEST	49958	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.882268906 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.889688015 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.889723063 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.889771938 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.889826059 CEST	49954	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.889930010 CEST	49954	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.889945030 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.889956951 CEST	49954	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.889962912 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.893068075 CEST	49959	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.893094063 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:08.893188953 CEST	49959	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.893340111 CEST	49959	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:08.893352032 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.127424955 CEST	443	49955	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.127964020 CEST	49955	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.128025055 CEST	443	49955	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.128557920 CEST	49955	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.128572941 CEST	443	49955	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.261867046 CEST	443	49955	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.261925936 CEST	443	49955	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.262028933 CEST	49955	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.262439966 CEST	49955	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.262480974 CEST	443	49955	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.262542963 CEST	49955	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.262559891 CEST	443	49955	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.265656948 CEST	49960	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.265712023 CEST	443	49960	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.265784025 CEST	49960	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.265913963 CEST	49960	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.265929937 CEST	443	49960	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.514087915 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.514616013 CEST	49956	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.514646053 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.515515089 CEST	49956	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.515525103 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.548542976 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.549455881 CEST	49957	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.549455881 CEST	49957	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.549519062 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.549568892 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.625433922 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.626033068 CEST	49958	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.626058102 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.626504898 CEST	49958	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.626509905 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.628843069 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.629266024 CEST	49959	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.629307985 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.629796982 CEST	49959	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.629807949 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.645185947 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.645260096 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.645375013 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.645505905 CEST	49956	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.645505905 CEST	49956	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.645836115 CEST	49956	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.645853043 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.648880959 CEST	49961	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.648972034 CEST	443	49961	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.649192095 CEST	49961	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.649192095 CEST	49961	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.649270058 CEST	443	49961	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.685059071 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.685203075 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.685337067 CEST	49957	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.685436010 CEST	49957	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.685436010 CEST	49957	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.685463905 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.685503006 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.688782930 CEST	49962	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.688822031 CEST	443	49962	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.688922882 CEST	49962	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.689097881 CEST	49962	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.689111948 CEST	443	49962	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.757994890 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.758028030 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.758086920 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.758254051 CEST	49958	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.758254051 CEST	49958	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.758738041 CEST	49958	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.758752108 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.759915113 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.759983063 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.760629892 CEST	49959	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.760674000 CEST	49959	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.760674000 CEST	49959	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.760693073 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.760713100 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.761322021 CEST	49963	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.761406898 CEST	443	49963	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.761519909 CEST	49963	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.761733055 CEST	49963	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.761761904 CEST	443	49963	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.763602972 CEST	49964	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.763641119 CEST	443	49964	13.107.246.60	192.168.2.4
Oct 25, 2024 10:02:09.763854980 CEST	49964	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.763854980 CEST	49964	443	192.168.2.4	13.107.246.60
Oct 25, 2024 10:02:09.763892889 CEST	443	49964	13.107.246.60	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 25, 2024 10:00:46.804740906 CEST	53	49849	1.1.1.1	192.168.2.4
Oct 25, 2024 10:00:46.805942059 CEST	53	55861	1.1.1.1	192.168.2.4
Oct 25, 2024 10:00:47.647094965 CEST	51571	53	192.168.2.4	1.1.1.1
Oct 25, 2024 10:00:47.647269964 CEST	60906	53	192.168.2.4	1.1.1.1
Oct 25, 2024 10:00:47.660360098 CEST	53	51571	1.1.1.1	192.168.2.4
Oct 25, 2024 10:00:47.682239056 CEST	53	60906	1.1.1.1	192.168.2.4
Oct 25, 2024 10:00:48.034495115 CEST	53	50667	1.1.1.1	192.168.2.4
Oct 25, 2024 10:00:50.436705112 CEST	52984	53	192.168.2.4	1.1.1.1
Oct 25, 2024 10:00:50.436872005 CEST	54104	53	192.168.2.4	1.1.1.1
Oct 25, 2024 10:00:50.444904089 CEST	53	52984	1.1.1.1	192.168.2.4
Oct 25, 2024 10:00:50.444978952 CEST	53	54104	1.1.1.1	192.168.2.4
Oct 25, 2024 10:00:50.564091921 CEST	53	61168	1.1.1.1	192.168.2.4
Oct 25, 2024 10:00:51.763724089 CEST	53	57375	1.1.1.1	192.168.2.4
Oct 25, 2024 10:00:52.802900076 CEST	60779	53	192.168.2.4	1.1.1.1
Oct 25, 2024 10:00:52.802900076 CEST	59846	53	192.168.2.4	1.1.1.1
Oct 25, 2024 10:00:52.813467026 CEST	53	59846	1.1.1.1	192.168.2.4
Oct 25, 2024 10:00:52.970237017 CEST	53	60779	1.1.1.1	192.168.2.4
Oct 25, 2024 10:00:53.115801096 CEST	53	56564	1.1.1.1	192.168.2.4
Oct 25, 2024 10:00:54.343655109 CEST	58411	53	192.168.2.4	1.1.1.1
Oct 25, 2024 10:00:54.343655109 CEST	56635	53	192.168.2.4	1.1.1.1
Oct 25, 2024 10:00:56.778788090 CEST	138	138	192.168.2.4	192.168.2.255
Oct 25, 2024 10:00:57.819708109 CEST	58392	53	192.168.2.4	1.1.1.1
Oct 25, 2024 10:00:57.819983959 CEST	55470	53	192.168.2.4	1.1.1.1
Oct 25, 2024 10:01:05.052112103 CEST	53	52538	1.1.1.1	192.168.2.4
Oct 25, 2024 10:01:24.261352062 CEST	53	53752	1.1.1.1	192.168.2.4
Oct 25, 2024 10:01:45.901107073 CEST	53	50589	1.1.1.1	192.168.2.4
Oct 25, 2024 10:01:47.255775928 CEST	53	63599	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 25, 2024 10:00:47.682326078 CEST	192.168.2.4	1.1.1.1	c242	(Port unreachable)	Destination Unreachable
Oct 25, 2024 10:00:57.891639948 CEST	192.168.2.4	1.1.1.1	c3c3	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 25, 2024 10:00:47.647094965 CEST	192.168.2.4	1.1.1.1	0x615d	Standard query (0)	www.timesheetz.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:00:47.647269964 CEST	192.168.2.4	1.1.1.1	0x100d	Standard query (0)	www.timesheetz.net	65	IN (0x0001)	false
Oct 25, 2024 10:00:50.436705112 CEST	192.168.2.4	1.1.1.1	0x5b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:00:50.436872005 CEST	192.168.2.4	1.1.1.1	0xc567	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 25, 2024 10:00:52.802900076 CEST	192.168.2.4	1.1.1.1	0xdc4a	Standard query (0)	www.timesheetz.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:00:52.802900076 CEST	192.168.2.4	1.1.1.1	0x5aea	Standard query (0)	www.timesheetz.net	65	IN (0x0001)	false
Oct 25, 2024 10:00:54.343655109 CEST	192.168.2.4	1.1.1.1	0x6769	Standard query (0)	dc.services.visualstudio.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:00:54.343655109 CEST	192.168.2.4	1.1.1.1	0x7918	Standard query (0)	dc.services.visualstudio.com	65	IN (0x0001)	false
Oct 25, 2024 10:00:57.819708109 CEST	192.168.2.4	1.1.1.1	0x32d8	Standard query (0)	dc.services.visualstudio.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:00:57.819983959 CEST	192.168.2.4	1.1.1.1	0x498a	Standard query (0)	dc.services.visualstudio.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 25, 2024 10:00:47.660360098 CEST	1.1.1.1	192.168.2.4	0x615d	No error (0)	www.timesheetz.net		104.26.10.58	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:00:47.660360098 CEST	1.1.1.1	192.168.2.4	0x615d	No error (0)	www.timesheetz.net		172.67.69.202	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:00:47.660360098 CEST	1.1.1.1	192.168.2.4	0x615d	No error (0)	www.timesheetz.net		104.26.11.58	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:00:47.682239056 CEST	1.1.1.1	192.168.2.4	0x100d	No error (0)	www.timesheetz.net			65	IN (0x0001)	false
Oct 25, 2024 10:00:50.444904089 CEST	1.1.1.1	192.168.2.4	0x5b	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:00:50.444978952 CEST	1.1.1.1	192.168.2.4	0xc567	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 25, 2024 10:00:52.813467026 CEST	1.1.1.1	192.168.2.4	0x5aea	No error (0)	www.timesheetz.net			65	IN (0x0001)	false
Oct 25, 2024 10:00:52.970237017 CEST	1.1.1.1	192.168.2.4	0xdc4a	No error (0)	www.timesheetz.net		104.26.10.58	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:00:52.970237017 CEST	1.1.1.1	192.168.2.4	0xdc4a	No error (0)	www.timesheetz.net		172.67.69.202	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:00:52.970237017 CEST	1.1.1.1	192.168.2.4	0xdc4a	No error (0)	www.timesheetz.net		104.26.11.58	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:00:54.352319956 CEST	1.1.1.1	192.168.2.4	0x7918	No error (0)	dc.services.visualstudio.com	dc.applicationinsights.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:00:54.352319956 CEST	1.1.1.1	192.168.2.4	0x7918	No error (0)	dc.applicationinsights.azure.com	global.in.ai.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:00:54.352319956 CEST	1.1.1.1	192.168.2.4	0x7918	No error (0)	global.in.ai.monitor.azure.com	global.in.ai.privatelink.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:00:54.352319956 CEST	1.1.1.1	192.168.2.4	0x7918	No error (0)	global.in.ai.privatelink.monitor.azure.com	dc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:00:54.352319956 CEST	1.1.1.1	192.168.2.4	0x7918	No error (0)	westeurope-global.in.applicationinsights.azure.com	gig-ai-prod-westeurope-global.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:00:54.352449894 CEST	1.1.1.1	192.168.2.4	0x6769	No error (0)	dc.services.visualstudio.com	dc.applicationinsights.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:00:54.352449894 CEST	1.1.1.1	192.168.2.4	0x6769	No error (0)	dc.applicationinsights.azure.com	global.in.ai.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:00:54.352449894 CEST	1.1.1.1	192.168.2.4	0x6769	No error (0)	global.in.ai.monitor.azure.com	global.in.ai.privatelink.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:00:54.352449894 CEST	1.1.1.1	192.168.2.4	0x6769	No error (0)	global.in.ai.privatelink.monitor.azure.com	dc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:00:54.352449894 CEST	1.1.1.1	192.168.2.4	0x6769	No error (0)	westeurope-global.in.applicationinsights.azure.com	gig-ai-prod-westeurope-global.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:00:57.827195883 CEST	1.1.1.1	192.168.2.4	0x32d8	No error (0)	dc.services.visualstudio.com	dc.applicationinsights.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:00:57.827195883 CEST	1.1.1.1	192.168.2.4	0x32d8	No error (0)	dc.applicationinsights.azure.com	global.in.ai.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:00:57.827195883 CEST	1.1.1.1	192.168.2.4	0x32d8	No error (0)	global.in.ai.monitor.azure.com	global.in.ai.privatelink.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:00:57.827195883 CEST	1.1.1.1	192.168.2.4	0x32d8	No error (0)	global.in.ai.privatelink.monitor.azure.com	dc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:00:57.827195883 CEST	1.1.1.1	192.168.2.4	0x32d8	No error (0)	westeurope-global.in.applicationinsights.azure.com	gig-ai-prod-westeurope-global.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:00:57.891525030 CEST	1.1.1.1	192.168.2.4	0x498a	No error (0)	dc.services.visualstudio.com	dc.applicationinsights.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:00:57.891525030 CEST	1.1.1.1	192.168.2.4	0x498a	No error (0)	dc.applicationinsights.azure.com	global.in.ai.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:00:57.891525030 CEST	1.1.1.1	192.168.2.4	0x498a	No error (0)	global.in.ai.monitor.azure.com	global.in.ai.privatelink.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:00:57.891525030 CEST	1.1.1.1	192.168.2.4	0x498a	No error (0)	global.in.ai.privatelink.monitor.azure.com	dc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:00:57.891525030 CEST	1.1.1.1	192.168.2.4	0x498a	No error (0)	westeurope-global.in.applicationinsights.azure.com	gig-ai-prod-westeurope-global.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:01:00.790532112 CEST	1.1.1.1	192.168.2.4	0x9df3	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:01:00.790532112 CEST	1.1.1.1	192.168.2.4	0x9df3	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:01:02.545061111 CEST	1.1.1.1	192.168.2.4	0xf965	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:01:02.545061111 CEST	1.1.1.1	192.168.2.4	0xf965	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:01:14.708383083 CEST	1.1.1.1	192.168.2.4	0xcbc8	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:01:14.708383083 CEST	1.1.1.1	192.168.2.4	0xcbc8	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:01:34.190288067 CEST	1.1.1.1	192.168.2.4	0x471	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:01:34.190288067 CEST	1.1.1.1	192.168.2.4	0x471	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:01:59.382234097 CEST	1.1.1.1	192.168.2.4	0x413	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:01:59.382234097 CEST	1.1.1.1	192.168.2.4	0x413	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.timesheetz.net

https:

fs.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	104.26.10.58	443	5680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:00:48 UTC	680	OUT	GET /EtzWeb/u/a3fc03fa61 HTTP/1.1 Host: www.timesheetz.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:00:48 UTC	1145	IN	HTTP/1.1 302 Found Date: Fri, 25 Oct 2024 08:00:48 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: ApplicationGatewayAffinityCORS=c7581c187614b8cc3302bd4d87317ffa; Path=/; SameSite=None; Secure Set-Cookie: ApplicationGatewayAffinity=c7581c187614b8cc3302bd4d87317ffa; Path=/ Set-Cookie: ASP.NET_SessionId=h315axbt1enderutazvarthe; path=/; HttpOnly; SameSite=Lax Cache-Control: private location: https://www.timesheetz.net/EtzWeb/s/35140691/146ddce569974637a1dfcf230bcaf0bb x-aspnetmvc-version: 5.2 x-aspnet-version: 4.0.30319 request-context: appId=cid-v1:d1f3bff8-463d-4a3f-a072-0c81d02ba231 access-control-expose-headers: Request-Context x-powered-by: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eeKK5mySdt%2B0FbG1UE7IoU6B3m%2B%2FGguqbJdcJaElCGdIozXJ6Hn8Rf%2F8m0RgdTTgE0vIzfqNigm4YaWWWSpcFQ0RztMIeFHqFyTojJbcr9KjyKfvJd%2BAnqoobOdZXy%2BrFj%2Brfw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d80acce4b044775-DFW
2024-10-25 08:00:48 UTC	200	IN	Data Raw: 63 32 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 69 6d 65 73 68 65 65 74 7a 2e 6e 65 74 2f 45 74 7a 57 65 62 2f 73 2f 33 35 31 34 30 36 39 31 2f 31 34 36 64 64 63 65 35 36 39 39 37 34 36 33 37 61 31 64 66 63 66 32 33 30 62 63 61 66 30 62 62 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: c2<html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://www.timesheetz.net/EtzWeb/s/35140691/146ddce569974637a1dfcf230bcaf0bb">here</a>.</h2></body></html>
2024-10-25 08:00:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	104.26.10.58	443	5680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:00:48 UTC	889	OUT	GET /EtzWeb/s/35140691/146ddce569974637a1dfcf230bcaf0bb HTTP/1.1 Host: www.timesheetz.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ApplicationGatewayAffinityCORS=c7581c187614b8cc3302bd4d87317ffa; ApplicationGatewayAffinity=c7581c187614b8cc3302bd4d87317ffa; ASP.NET_SessionId=h315axbt1enderutazvarthe
2024-10-25 08:00:49 UTC	938	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 08:00:49 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, no-store, max-age=0 expires: Fri, 25 Oct 2024 08:00:49 GMT last-modified: Fri, 25 Oct 2024 08:00:49 GMT location: /EtzWeb/Error/AlreadyEtzSigned vary: * x-aspnetmvc-version: 5.2 x-aspnet-version: 4.0.30319 request-context: appId=cid-v1:d1f3bff8-463d-4a3f-a072-0c81d02ba231 access-control-expose-headers: Request-Context x-powered-by: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=woaJfMqYtF6kr34EqoTkEhAvdSUbX87jSIw8wvzGy0xdguo7FfGSqw4jM2xJJOAH6BW3hd1o0DZZxLImLgdOBPXy8rS0NdckXoj%2BfOf5tegSHfEOsxRB2%2FHbJ14L8kZXOirLPg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d80acd16a4a2d45-DFW
2024-10-25 08:00:49 UTC	153	IN	Data Raw: 39 33 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 45 74 7a 57 65 62 2f 45 72 72 6f 72 2f 41 6c 72 65 61 64 79 45 74 7a 53 69 67 6e 65 64 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: 93<html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/EtzWeb/Error/AlreadyEtzSigned">here</a>.</h2></body></html>
2024-10-25 08:00:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49739	104.26.10.58	443	5680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:00:50 UTC	868	OUT	GET /EtzWeb/Error/AlreadyEtzSigned HTTP/1.1 Host: www.timesheetz.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ApplicationGatewayAffinityCORS=c7581c187614b8cc3302bd4d87317ffa; ApplicationGatewayAffinity=c7581c187614b8cc3302bd4d87317ffa; ASP.NET_SessionId=h315axbt1enderutazvarthe
2024-10-25 08:00:50 UTC	791	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:00:50 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: private vary: Accept-Encoding x-aspnetmvc-version: 5.2 x-aspnet-version: 4.0.30319 request-context: appId=cid-v1:d1f3bff8-463d-4a3f-a072-0c81d02ba231 access-control-expose-headers: Request-Context x-powered-by: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GIWFDqD7Jt2vwOnXFQ5ME7Kz7aJicvk5HVw%2Bho%2Bb1ZFj7sZUJ59zoNPGLIQbsoSmJpj%2FpbneDTwUg0cGpTwfxgYqeSmFfiptEOjMde0ol7aUFEAjuda5K3JjrsT6GqSzW8lMkg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d80acd92ed34763-DFW
2024-10-25 08:00:50 UTC	578	IN	Data Raw: 65 62 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 20 49 44 3d 22 48 65 61 64 31 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 41 6c 72 65 61 64 79 20 53 69 67 6e 65 64 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 45 54 5a 20 54 69 6d 65 73 68 65 65 74 20 53 6f 6c 75 74 69 Data Ascii: eba<!DOCTYPE html><html lang="en"><head ID="Head1"> <meta charset="utf-8" /> <title>Already Signed</title> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <meta name="author" content="ETZ Timesheet Soluti
2024-10-25 08:00:50 UTC	1369	IN	Data Raw: 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 36 36 36 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 35 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 61 2c 20 61 3a 68 6f 76 65 72 2c 20 61 3a 61 63 74 69 76 65 2c 20 61 3a 76 69 73 69 74 65 64 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 43 31 44 35 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 Data Ascii: font-weight: 400; color: #666; font-size: 18px; line-height: 150%; } a, a:hover, a:active, a:visited { color: #00C1D5; text-decoration: underline; }
2024-10-25 08:00:50 UTC	1369	IN	Data Raw: 6f 6e 66 69 67 20 7d 2c 20 72 20 3d 20 64 6f 63 75 6d 65 6e 74 2c 20 66 20 3d 20 77 69 6e 64 6f 77 2c 20 65 20 3d 20 22 73 63 72 69 70 74 22 2c 20 6f 20 3d 20 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 65 29 2c 20 69 2c 20 75 3b 20 66 6f 72 20 28 6f 2e 73 72 63 20 3d 20 63 6f 6e 66 69 67 2e 75 72 6c 20 7c 7c 20 22 2f 2f 61 7a 34 31 36 34 32 36 2e 76 6f 2e 6d 73 65 63 6e 64 2e 6e 65 74 2f 73 63 72 69 70 74 73 2f 61 2f 61 69 2e 30 2e 6a 73 22 2c 20 72 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 5b 30 5d 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2c 20 74 2e 63 6f 6f 6b 69 65 20 3d 20 72 2e 63 6f 6f 6b 69 65 2c 20 74 2e 71 75 65 75 65 20 3d 20 5b 5d 2c 20 69 20 3d 20 5b 22 45 76 65 6e 74 22 Data Ascii: onfig }, r = document, f = window, e = "script", o = r.createElement(e), i, u; for (o.src = config.url \|\| "//az416426.vo.msecnd.net/scripts/a/ai.0.js", r.getElementsByTagName(e)[0].parentNode.appendChild(o), t.cookie = r.cookie, t.queue = [], i = ["Event"
2024-10-25 08:00:50 UTC	461	IN	Data Raw: 4e 61 6d 65 28 27 73 63 72 69 70 74 27 29 5b 30 5d 3b 20 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 67 61 2c 20 73 29 3b 0d 0a 09 20 20 20 20 7d 29 28 29 3b 0d 0a 0d 0a 09 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 09 20 20 20 20 20 20 20 20 2f 2f 20 63 75 73 74 6f 6d 20 67 6f 6f 67 6c 65 20 74 72 61 63 6b 65 72 20 65 76 65 6e 74 0d 0a 09 20 20 20 20 20 20 20 20 76 61 72 20 70 6c 65 6e 64 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 0d 0a 09 20 20 20 20 20 20 20 20 76 61 72 20 70 6c 6c 6f 61 64 20 3d 20 70 6c 65 6e 64 2e 67 65 74 54 69 6d 65 28 29 20 2d 20 70 6c 73 74 61 72 74 2e 67 65 74 54 69 6d 65 28 29 3b 0d 0a 09 20 20 20 20 20 20 20 20 76 61 72 20 75 73 65 Data Ascii: Name('script')[0]; s.parentNode.insertBefore(ga, s); })(); window.onload = function () { // custom google tracker event var plend = new Date(); var plload = plend.getTime() - plstart.getTime(); var use
2024-10-25 08:00:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49741	104.26.10.58	443	5680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:00:51 UTC	766	OUT	GET /EtzWeb/Css/bootstrap.css HTTP/1.1 Host: www.timesheetz.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.timesheetz.net/EtzWeb/Error/AlreadyEtzSigned Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ApplicationGatewayAffinityCORS=c7581c187614b8cc3302bd4d87317ffa; ApplicationGatewayAffinity=c7581c187614b8cc3302bd4d87317ffa; ASP.NET_SessionId=h315axbt1enderutazvarthe
2024-10-25 08:00:51 UTC	728	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:00:51 GMT Content-Type: text/css Content-Length: 82674 Connection: close Cf-Bgj: minify Cf-Polished: origSize=104863 etag: "06032bb6e9fd91:0" last-modified: Thu, 15 Jun 2023 09:49:52 GMT vary: Accept-Encoding x-powered-by: ASP.NET CF-Cache-Status: HIT Age: 4548 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rAQCIrIdS3EvqKL88cZ%2B4YDM3HSR%2F%2Fr06Sq8IDtTlxCo%2BGJg82MtbRMSjqwA0VNqz1kxhW2Cvx6kN%2BzRjp06M1m6ojfu%2FJUbbIazWXRvRQzkCqaHafz8y4hmAbn51m7IoG3oHg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d80ace04f0b28b3-DFW
2024-10-25 08:00:51 UTC	641	IN	Data Raw: 2f 2a 21 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 32 2e 30 2e 34 0a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 54 77 69 74 74 65 72 2c 20 49 6e 63 0a 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 20 76 32 2e 30 0a 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c 49 43 45 4e 53 45 2d 32 2e 30 0a 2a 0a 2a 20 44 65 73 69 67 6e 65 64 20 61 6e 64 20 62 75 69 6c 74 20 77 69 74 68 20 61 6c 6c 20 74 68 65 20 6c 6f 76 65 20 69 6e 20 74 68 65 20 77 6f 72 6c 64 20 40 74 77 69 74 74 65 72 20 62 79 20 40 6d 64 6f 20 61 6e 64 20 40 66 61 74 2e 2a 2f 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 64 65 74 61 69 6c 73 2c 66 69 67 63 61 70 74 69 6f 6e 2c Data Ascii: /! Bootstrap v2.0.4** Copyright 2012 Twitter, Inc* Licensed under the Apache License v2.0* http://www.apache.org/licenses/LICENSE-2.0** Designed and built with all the love in the world @twitter by @mdo and @fat.*/article,aside,details,figcaption,
2024-10-25 08:00:51 UTC	1369	IN	Data Raw: 3a 37 35 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 73 75 70 7b 74 6f 70 3a 2d 2e 35 65 6d 7d 73 75 62 7b 62 6f 74 74 6f 6d 3a 2d 2e 32 35 65 6d 7d 69 6d 67 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 62 6f 72 64 65 72 3a 30 3b 2d 6d 73 2d 69 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 2d 6d 6f 64 65 3a 62 69 63 75 62 69 63 7d 23 6d 61 70 5f 63 61 6e 76 61 73 20 69 6d 67 7b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 62 75 74 74 6f 6e 2c 69 Data Ascii: :75%;line-height:0;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{vertical-align:middle;border:0;-ms-interpolation-mode:bicubic}#map_canvas img{max-width:none}button,input,select,textarea{margin:0;font-size:100%;vertical-align:middle}button,i
2024-10-25 08:00:51 UTC	1369	IN	Data Raw: 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6f 6e 74 65 6e 74 3a 22 22 7d 2e 72 6f 77 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 5b 63 6c 61 73 73 2a 3d 73 70 61 6e 5d 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 70 78 7d 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 6e 61 76 62 61 72 2d 66 69 78 65 64 2d 74 6f 70 20 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 6e 61 76 62 61 72 2d 66 69 78 65 64 2d 62 6f 74 74 6f 6d 20 2e 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 39 34 30 70 78 7d 2e 73 70 61 6e 31 32 7b 77 69 64 74 68 3a 39 34 30 70 78 7d 2e 73 70 61 6e 31 31 7b 77 69 64 74 68 3a 38 36 30 70 78 7d 2e 73 70 61 6e 31 30 7b 77 69 64 74 68 3a 37 38 30 70 78 7d 2e 73 70 61 6e 39 7b 77 69 64 74 68 3a 37 30 30 70 78 7d 2e 73 70 61 6e Data Ascii: splay:table;content:""}.row:after{clear:both}[class*=span]{float:left;margin-left:20px}.container,.navbar-fixed-top .container,.navbar-fixed-bottom .container{width:940px}.span12{width:940px}.span11{width:860px}.span10{width:780px}.span9{width:700px}.span
2024-10-25 08:00:51 UTC	1369	IN	Data Raw: 36 38 30 38 35 30 39 39 25 3b 2a 77 69 64 74 68 3a 37 34 2e 34 31 34 38 39 33 36 30 39 36 33 38 33 25 7d 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 73 70 61 6e 38 7b 77 69 64 74 68 3a 36 35 2e 39 35 37 34 34 36 38 30 31 39 39 39 39 39 25 3b 2a 77 69 64 74 68 3a 36 35 2e 39 30 34 32 35 35 33 31 32 36 33 38 32 38 25 7d 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 73 70 61 6e 37 7b 77 69 64 74 68 3a 35 37 2e 34 34 36 38 30 38 35 30 35 25 3b 2a 77 69 64 74 68 3a 35 37 2e 33 39 33 36 31 37 30 31 35 36 33 38 33 25 7d 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 73 70 61 6e 36 7b 77 69 64 74 68 3a 34 38 2e 39 33 36 31 37 30 32 30 37 39 39 39 39 39 25 3b 2a 77 69 64 74 68 3a 34 38 2e 38 38 32 39 37 38 37 31 38 36 33 38 32 39 25 7d 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 73 70 61 6e 35 7b 77 Data Ascii: 68085099%;width:74.4148936096383%}.row-fluid .span8{width:65.95744680199999%;width:65.90425531263828%}.row-fluid .span7{width:57.446808505%;width:57.3936170156383%}.row-fluid .span6{width:48.93617020799999%;width:48.88297871863829%}.row-fluid .span5{w
2024-10-25 08:00:51 UTC	1369	IN	Data Raw: 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 68 34 20 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 7d 68 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 7d 68 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 63 6f 6c 6f 72 3a 23 39 39 39 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 2e 70 61 67 65 2d 68 65 61 64 65 72 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 37 70 78 3b 6d 61 72 67 69 6e 3a 31 38 70 78 20 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 65 65 7d 2e 70 61 67 65 2d 68 65 61 64 65 72 20 68 31 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 75 6c 2c 6f 6c 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 20 30 20 39 70 78 20 32 35 70 78 7d 75 6c 20 75 Data Ascii: nt-size:14px}h4 small{font-size:12px}h5{font-size:12px}h6{font-size:11px;color:#999;text-transform:uppercase}.page-header{padding-bottom:17px;margin:18px 0;border-bottom:1px solid #eee}.page-header h1{line-height:1}ul,ol{padding:0;margin:0 0 9px 25px}ul u
2024-10-25 08:00:51 UTC	1369	IN	Data Raw: 66 74 65 72 2c 62 6c 6f 63 6b 71 75 6f 74 65 3a 62 65 66 6f 72 65 2c 62 6c 6f 63 6b 71 75 6f 74 65 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 7d 61 64 64 72 65 73 73 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 38 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 38 70 78 7d 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 7d 63 69 74 65 7b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 63 6f 64 65 2c 70 72 65 7b 70 61 64 64 69 6e 67 3a 30 20 33 70 78 20 32 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4d 65 6e 6c 6f 2c 4d 6f 6e 61 63 6f 2c 43 6f 6e 73 6f 6c 61 73 2c 63 6f 75 72 69 65 72 20 6e 65 77 2c 6d 6f 6e 6f 73 70 61 63 65 3b 66 Data Ascii: fter,blockquote:before,blockquote:after{content:""}address{display:block;margin-bottom:18px;font-style:normal;line-height:18px}small{font-size:100%}cite{font-style:normal}code,pre{padding:0 3px 2px;font-family:Menlo,Monaco,Consolas,courier new,monospace;f
2024-10-25 08:00:51 UTC	1369	IN	Data Raw: 70 65 3d 74 65 78 74 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 74 69 6d 65 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 74 69 6d 65 2d 6c 6f 63 61 6c 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 6d 6f 6e 74 68 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 74 69 6d 65 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 77 65 65 6b 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 75 72 6c 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 63 6f 6c 6f 72 5d 2c 2e 75 Data Ascii: pe=text],input[type=password],input[type=datetime],input[type=datetime-local],input[type=date],input[type=month],input[type=time],input[type=week],input[type=number],input[type=email],input[type=url],input[type=search],input[type=tel],input[type=color],.u
2024-10-25 08:00:51 UTC	1369	IN	Data Raw: 74 79 70 65 3d 72 65 73 65 74 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 7b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 75 6e 65 64 69 74 61 62 6c 65 2d 74 65 78 74 61 72 65 61 7b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 73 65 6c 65 63 74 2c 69 6e 70 75 74 5b 74 79 70 65 3d 66 69 6c 65 5d 7b 68 65 69 67 68 74 3a 32 38 70 78 3b 2a 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 38 70 78 7d 73 65 6c 65 63 74 7b 77 69 64 74 68 3a 32 32 30 70 78 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 62 62 62 7d 73 65 6c 65 63 74 5b 6d 75 6c 74 69 70 6c 65 5d 2c 73 65 6c Data Ascii: type=reset],input[type=button],input[type=radio],input[type=checkbox]{width:auto}.uneditable-textarea{width:auto;height:auto}select,input[type=file]{height:28px;*margin-top:4px;line-height:28px}select{width:220px;border:1px solid #bbb}select[multiple],sel
2024-10-25 08:00:51 UTC	1369	IN	Data Raw: 75 74 2d 70 72 65 70 65 6e 64 20 2e 75 6e 65 64 69 74 61 62 6c 65 2d 69 6e 70 75 74 5b 63 6c 61 73 73 2a 3d 73 70 61 6e 5d 2c 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 69 6e 70 75 74 2d 70 72 65 70 65 6e 64 20 5b 63 6c 61 73 73 2a 3d 73 70 61 6e 5d 2c 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 69 6e 70 75 74 2d 61 70 70 65 6e 64 20 5b 63 6c 61 73 73 2a 3d 73 70 61 6e 5d 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 69 6e 70 75 74 2c 74 65 78 74 61 72 65 61 2c 2e 75 6e 65 64 69 74 61 62 6c 65 2d 69 6e 70 75 74 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 69 6e 70 75 74 2e 73 70 61 6e 31 32 2c 74 65 78 74 61 72 65 61 2e 73 70 61 6e 31 32 2c 2e 75 6e 65 64 69 74 61 62 6c 65 2d 69 6e 70 75 74 2e 73 70 61 6e 31 32 7b 77 69 64 74 68 3a 39 33 30 70 78 7d Data Ascii: ut-prepend .uneditable-input[class=span],.row-fluid .input-prepend [class=span],.row-fluid .input-append [class*=span]{display:inline-block}input,textarea,.uneditable-input{margin-left:0}input.span12,textarea.span12,.uneditable-input.span12{width:930px}
2024-10-25 08:00:51 UTC	1369	IN	Data Raw: 72 6f 75 70 2e 77 61 72 6e 69 6e 67 20 2e 68 65 6c 70 2d 62 6c 6f 63 6b 2c 2e 63 6f 6e 74 72 6f 6c 2d 67 72 6f 75 70 2e 77 61 72 6e 69 6e 67 20 2e 68 65 6c 70 2d 69 6e 6c 69 6e 65 7b 63 6f 6c 6f 72 3a 23 63 30 39 38 35 33 7d 2e 63 6f 6e 74 72 6f 6c 2d 67 72 6f 75 70 2e 77 61 72 6e 69 6e 67 20 2e 63 68 65 63 6b 62 6f 78 2c 2e 63 6f 6e 74 72 6f 6c 2d 67 72 6f 75 70 2e 77 61 72 6e 69 6e 67 20 2e 72 61 64 69 6f 2c 2e 63 6f 6e 74 72 6f 6c 2d 67 72 6f 75 70 2e 77 61 72 6e 69 6e 67 20 69 6e 70 75 74 2c 2e 63 6f 6e 74 72 6f 6c 2d 67 72 6f 75 70 2e 77 61 72 6e 69 6e 67 20 73 65 6c 65 63 74 2c 2e 63 6f 6e 74 72 6f 6c 2d 67 72 6f 75 70 2e 77 61 72 6e 69 6e 67 20 74 65 78 74 61 72 65 61 7b 63 6f 6c 6f 72 3a 23 63 30 39 38 35 33 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 Data Ascii: roup.warning .help-block,.control-group.warning .help-inline{color:#c09853}.control-group.warning .checkbox,.control-group.warning .radio,.control-group.warning input,.control-group.warning select,.control-group.warning textarea{color:#c09853;border-color

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49743	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:00:51 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-25 08:00:51 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=204251 Date: Fri, 25 Oct 2024 08:00:51 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49745	104.26.10.58	443	5680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:00:52 UTC	825	OUT	GET /Static/images/Branding/error-page.png HTTP/1.1 Host: www.timesheetz.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.timesheetz.net/EtzWeb/Error/AlreadyEtzSigned Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ApplicationGatewayAffinityCORS=c7581c187614b8cc3302bd4d87317ffa; ApplicationGatewayAffinity=c7581c187614b8cc3302bd4d87317ffa; ASP.NET_SessionId=h315axbt1enderutazvarthe
2024-10-25 08:00:52 UTC	664	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:00:52 GMT Content-Type: image/png Content-Length: 45601 Connection: close last-modified: Fri, 21 Oct 2022 11:48:02 GMT etag: "0c543f942e5d81:0" x-powered-by: ASP.NET CF-Cache-Status: HIT Age: 4549 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fSxpHearZwUP1hj45hLbku7kPoRhF%2FAu%2FE6ohQjk%2FoPnulCJMIVQQg0J6A1%2F4K393Hu8wctj4un%2FoPadcGSd5tGSnNDebZcceW%2Fe478%2FFNQgE7s4m62UbhdKiPuS%2BekWpN4DUA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d80ace7ead56c80-DFW
2024-10-25 08:00:52 UTC	705	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 6a 00 00 01 75 08 06 00 00 00 c1 58 a0 ad 00 00 00 04 67 41 4d 41 00 00 af c8 37 05 8a e9 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 b1 b3 49 44 41 54 78 da ec bd 07 b0 24 c7 79 26 f8 67 55 7b f3 bc 1b 6f 31 18 03 cc 00 43 78 80 0e 14 29 12 24 41 8a de 88 4e 10 45 86 44 85 24 4a 1b 2b ad bb 50 ec c5 6a 6f 63 b5 b1 ba b8 3b de 9e 56 52 48 5a 43 49 94 28 6a 65 68 45 81 1e 84 07 88 c1 0c 66 30 ee cd 3c 6f da 77 97 cd fb ff 6c f3 da 54 75 57 db d7 dd af 72 50 78 6d aa cb 64 65 7e f9 e5 97 bf 61 9c 73 70 8b 5b dc e2 16 b7 f4 6f 91 dc 2a 70 8b 5b dc e2 96 fe 2e 9e e2 8b b7 3c f3 fb 43 77 73 13 be 68 cd 67 5e c9 03 21 39 00 8c 49 a0 Data Ascii: PNGIHDRjuXgAMA7tEXtSoftwareAdobe ImageReadyqe<IDATx$y&gU{o1Cx)$ANED$J+Pjoc;VRHZCI(jehEf0<owlTuWrPxmde~asp[o*p[.<Cwshg^!9I
2024-10-25 08:00:52 UTC	1369	IN	Data Raw: 7d 27 7d 23 70 21 79 1d 4c bc a6 51 6c 03 bb b0 8d ad e4 36 61 43 4b 8a eb 99 c3 f7 69 ac df a5 dc 3a 7e 37 89 d7 77 53 1c e3 10 b6 a1 11 dc ff 62 e2 ba 68 97 0a 3e 6f 6a 3b 87 22 7b f0 ef 92 d8 e7 d6 91 fd d8 f6 d6 20 80 d7 4e d7 b5 8a 75 4e 65 16 f7 2f 7e 4e c5 c0 7f 2f c7 af 61 bb dc 23 ea 83 9e cd 91 91 bd b0 8a ed b0 d4 d7 bc a3 70 31 39 0f 07 23 bb c0 23 cb b0 81 ed 4a 1c 2b 34 25 ee 53 33 35 d1 4e 8e e0 31 e8 b9 d3 33 de c4 76 b7 81 75 75 7c e4 80 78 ce c0 38 28 ba 2a 8e 4f 6d 65 16 fb 10 f5 3b 2a aa a1 61 9f 94 c5 eb 38 fe 06 9f 23 c8 d8 56 64 26 63 dd 98 e2 78 d8 2e 70 1f 49 fc 2d 2a 05 fe c2 3d 0c 62 f9 83 e3 8f d6 02 b5 5b dc d2 a3 c2 68 dc a2 31 b3 b0 f9 05 7e e6 3f f3 14 5e 4b 85 8d 15 de 33 1c 68 c6 10 c4 0f 67 8c dc 21 ec 88 4a 1b 40 ed f5 Data Ascii: }'}#p!yLQl6aCKi:~7wSbh>oj;"{ NuNe/~N/a#p19##J+4%S35N13vuu\|x8(Ome;a8#Vd&cx.pI-*=b[h1~?^K3hg!J@
2024-10-25 08:00:52 UTC	1369	IN	Data Raw: c8 db 23 90 7b b4 ce 8d 87 b1 a3 3f 12 53 92 b7 3f bd f1 f2 0c 82 f4 3e dc 67 3c a3 2b c2 8d 5b 80 31 cb bb 69 23 df 26 29 c4 ad c8 5e 03 77 c1 38 46 2a 93 48 74 53 2f 0c 9c e6 38 33 d8 38 fe 85 b8 92 3c 71 25 b5 70 5b 40 f6 7f 74 c4 1b 26 76 7d 0e 9f db df e0 33 7b 2e 0f f5 ee 3a a4 0b d4 6e e9 fb 92 d4 d3 30 e6 8d 8e 84 e4 e0 fd 9b 90 bc ed 62 f2 fa 2e c5 d4 ee ca ea ca dd 71 2d 15 8a 6b 69 01 e0 14 1f 81 80 99 62 39 b8 9d bb 3f 19 77 7e f0 a4 d7 f9 81 93 62 b5 a4 79 96 21 60 1f f6 30 cf 61 d5 d4 28 e6 ca ca a6 92 b8 db 2f fb 9f 0a 48 be cb 21 4f e0 19 7c b6 2f 19 c2 f3 dd 2d 2e 50 bb a5 bf 1e 22 93 7d c8 8c c9 c9 64 0a 59 f1 7d c8 a2 df b9 a9 26 4f 2f 67 d7 83 c4 b0 8b 12 06 05 9c aa 98 71 bb 20 dd f7 a5 f8 84 f2 01 88 b6 2c 6a 28 c8 d5 1a 98 33 f8 5c Data Ascii: #{?S?>g<+[1i#&)^w8F*HtS/838<q%p[@t&v}3{.:n0b.q-kib9?w~by!`0a(/H!O\|/-.P"}dY}&O/gq ,j(3\
2024-10-25 08:00:52 UTC	1369	IN	Data Raw: 64 d9 1e e6 15 80 7d 35 b5 b0 67 3e b3 fc db 7b 43 33 9f cc 19 da bf c7 af ff 1e f2 da b5 eb 30 e3 02 f5 40 cd 52 c8 bc e9 bd 06 37 ce 5e 4c dc 78 db a6 92 18 cf 1a 8a 98 4e 4a 8c 01 b8 9a 9e 5b 06 b1 61 17 f4 6b 02 6b c3 50 c6 16 32 6b 77 a6 f4 ec ef ec 0e 4c dd 6d 02 ff 5f b8 cb d3 b8 65 c0 5d 6c 74 81 ba cf 4b 18 b7 23 8a a9 7e 78 3e b3 f2 d8 f5 d4 f2 34 35 ea e2 42 a1 5b dc 32 0c cc ba 10 20 8c c2 ab 52 56 f5 c3 49 35 f3 8b fb 23 b3 27 11 9f bf 82 bb 7c 15 b7 79 17 ac 5d a0 ee bb 86 8b 2c 83 58 f4 54 4a cf 3d a8 18 fa 6f 6e 28 c9 7b 36 d4 b8 48 85 e5 2f 38 ac b8 a5 e5 0a de de e2 c2 8d 3d 78 48 32 02 08 02 b6 9e 0e 9d 8b 5d 7e 64 26 30 f1 48 c6 50 bf 10 95 03 ff 17 7e 7d 05 37 37 9f 63 07 a7 e9 6e 69 a3 1c 8a ee 61 8c 49 fb 24 26 fd e7 e7 63 af 7c e1 Data Ascii: d}5g>{C30@R7^LxNJ[akkP2kwLm_e]ltK#~x>45B[2 RVI5#'\|y],XTJ=on({6H/8=xH2]~d&0HP~}77cniaI$&c\|
2024-10-25 08:00:52 UTC	1369	IN	Data Raw: 43 73 81 7a 87 4a 1d 04 d0 b7 5c 4f 2f 3f b6 9c db f8 a5 94 96 89 50 ee 37 5f de fd 75 38 64 0e 66 fd c6 89 bc d1 14 30 db fd 86 35 7f cd fd 82 d5 bc 99 13 db 80 b9 15 80 37 0d de cc 5e 5a 61 ac 1e 68 17 3e e5 36 92 48 1f 82 36 c5 ca a1 82 60 4d 97 76 87 97 79 ff 0f 89 49 c1 b4 9e fd 9f 93 be 51 17 a8 77 5a a1 11 da e0 c6 ed 37 b3 ab bf 71 25 75 f3 03 49 35 13 a0 36 eb 61 f2 e0 80 b4 1d 30 d8 98 d3 31 d6 22 30 33 87 4c 99 b5 86 b0 6c 70 aa b7 79 30 b7 60 b5 cc e2 73 6e b5 6f 11 e0 79 ad 79 9f 15 70 57 5b 90 f0 32 94 67 cc c6 9d bd 4f 75 6c ea 87 19 3d 07 d7 d3 4b c7 54 53 fb 97 21 4f 40 9f f5 4f 7c 13 2f 78 73 a7 02 f5 50 c7 a3 26 40 66 35 cb 67 cc a7 98 da 1d 37 33 6b 9f 3b 17 bb f2 a1 44 01 a4 a5 61 d5 a3 7b 19 2f d9 8d d1 6c dd c3 1a d5 89 d5 77 52 87 Data Ascii: CszJ\O/?P7_u8df057^Zah>6H6`MvyIQwZ7q%uI56a01"03Llpy0`snoyypW[2gOul=KTS!O@O\|/xsP&@f5g73k;Da{/lwR
2024-10-25 08:00:52 UTC	1369	IN	Data Raw: 3e 3c b4 d2 c7 a0 0f 38 38 e6 9f de 54 52 ff 66 21 b3 76 36 6d 64 20 28 fb fa 9b 49 d7 a8 1b cc 5a aa 68 46 e6 a8 91 4d 9a c3 73 ab 9d 9c e9 ce 1d 96 36 fa 11 18 78 27 ee 85 59 d2 0b cb 9f b0 c6 d2 48 43 d9 98 d9 e8 d3 ac f6 f4 dc e6 60 25 95 83 b1 32 99 84 f7 8d 19 1f 2f b0 6a 8e a4 0c fb 7e 44 66 d2 a7 0f 45 76 99 51 4f e8 3f e2 35 2e bb 40 dd 3f 85 42 6e 9d 48 eb b9 7f 75 25 bd 70 67 52 4f 23 48 fb fb 53 93 b6 73 5a 69 14 d9 8e 35 b1 48 d8 ea 02 a1 a3 08 78 1d 02 64 d6 9d fa ec 2a 08 77 cd e1 a6 4a 54 ae 06 6e be d5 26 ea 39 df d8 2e 40 f2 da 67 5b 71 9c ea c0 4f 16 a0 cd ca 81 be 70 24 db c5 46 be 5d 5d 8b 41 c4 13 a4 d8 20 51 bc a8 4f 1d 1f 3d a8 84 e5 d0 bf c7 af d2 30 04 9a f5 a0 03 b5 8c 80 7c 26 67 28 bf fe 62 ec d5 47 14 43 0d 7a fb 75 e1 d0 92 Data Ascii: ><88TRf!v6md (IZhFMs6x'YHC`%2/j~DfEvQO?5.@?BnHu%pgRO#HSsZi5Hxd*wJTn&9.@g[qOp$F]]A QO=0\|&g(bGCzu
2024-10-25 08:00:52 UTC	1369	IN	Data Raw: dc 0b 59 64 20 80 9c b7 ee eb 52 d3 be aa 3d 12 cb 0f d8 94 93 91 85 a5 08 af c5 72 27 0c bb f4 b9 85 1c 52 3d b8 54 ba c0 57 c6 b3 e4 bc f7 60 ad 18 0a 9b cf 2c bd 2d 20 f9 97 f7 46 a6 fe 85 c9 79 62 60 80 ba 9f 0c c0 8b d7 22 31 e9 e8 8d cc f2 e7 af a6 16 4e 1b dc 94 fb ce 14 cf 6a 2a c0 a1 b1 19 5b 71 9f 2a a6 d2 52 63 1d 80 ac 1c 6e e9 c1 20 c1 db f8 4d b3 c7 b0 6a b7 4e c1 b6 0f da 2b 39 c4 c4 94 54 f8 0a bb f9 ce 88 37 70 75 d4 1b f9 02 07 33 dd cf cc a2 2f ad 3e 48 37 92 99 ec 59 cd 6d be fb 5c fc ea fb f1 23 7f 5f 98 e1 55 39 ab 6c c5 ec 2d 63 d3 55 f1 7a 99 95 2a d1 40 06 61 36 33 58 ab 63 95 e6 a6 cc f9 b5 57 9c cf 4a 42 61 ad 55 8b 7d 8c ea 1d 0a a0 ad c6 fe 6e f0 ec aa 4c f3 eb 3c 0c 3b a0 ac ba a8 02 c9 66 60 13 14 ac c1 e1 98 8d f9 28 b3 fb Data Ascii: Yd R=r'R=TW`,- Fyb`"1Nj[qRcn MjN+9T7pu3/>H7Ym\#_U9l-cUz*@a63XcWJBaU}nL<;f`(
2024-10-25 08:00:52 UTC	1369	IN	Data Raw: 1c 65 4f 2a 97 3e 7a f9 4f 02 29 ac 98 ea 5b ae a4 16 3e 9a d1 95 51 af 24 6f 0f 48 b7 33 c7 90 aa f6 97 ba 7c 3e b7 b8 65 d0 e5 92 e2 5f d6 bf fd 84 50 c8 27 7b 61 4d 89 1f 9b cf 2c 7d 1a df ef 02 72 66 ec 07 58 e2 3d de 0c 6e 1e 47 46 fd bf c5 b4 64 44 e7 fa f6 69 e4 35 d1 ec b6 e4 0e 66 e7 e6 6d e5 c2 2b 35 26 80 d6 71 0d 98 b3 98 0d 76 52 87 53 0f f2 4e 4c bb eb 48 1b 9d 96 4e b6 55 37 e9 f2 b5 74 cd 05 df ca 7d bb 19 29 04 9a 91 42 6a 35 17 d6 8c 55 4f d1 8d dc 6e b6 6a 21 b4 30 a9 77 4d 81 cc 83 d3 7a 06 d6 72 b1 db 13 5a fa 33 6c 9b 63 f7 97 e0 05 67 16 3d d8 b8 f8 8b 7c 7a 14 6f fe 2d 57 92 8b 77 1b dc 90 a4 6d 06 e9 0a d7 70 a8 93 8d a5 41 a3 ac 87 87 95 a0 ef 40 8f b6 90 3a 9c 80 6e 37 01 a0 23 87 eb 17 4f c0 3e ba 87 ae e8 d9 cd 3c 33 1b a0 6c Data Ascii: eO*>zO)[>Q$oH3\|>e_P'{aM,}rfX=nGFdDi5fm+5&qvRSNLHNU7t})Bj5UOnj!0wMzrZ3lcg=\|zo-WwmpA@:n7#O><3l
2024-10-25 08:00:52 UTC	1369	IN	Data Raw: 5d f5 34 ac 06 da 5b 5d 8f 43 de 00 a4 59 8f 41 ba 59 a9 c3 95 38 86 5e 0e e9 9a 6e 5d 2f 46 48 b3 9a 75 bd f6 5f 6f 41 bf 66 0d 0a 9a cb be de c6 98 b9 a9 25 21 67 e4 ee 43 9c bb 23 ff 79 67 ff 59 32 ea 0e 03 29 1d 6c e4 5a 7a e5 bd 49 3d bb 57 62 db a8 4b d7 59 11 b6 74 6a 71 90 42 ab 36 46 b5 03 c4 75 a8 9d b5 ac af b5 e2 f2 ed 02 f4 8e 60 d9 96 ae db 4d 9e c7 d6 39 c6 2e b6 75 5d b7 f3 c6 4e 31 35 3f 2d 7a 4b 72 8b 44 ba 56 87 06 8b bc 8b 9d 66 b9 78 b2 55 25 f6 48 d0 13 b8 30 ee 8b 3e 03 5d b4 00 ef 16 a3 9e 4e 68 e9 4f 2e 67 d7 8e 28 ba 22 82 9b 6c 0b 48 83 b5 85 87 6d d6 95 06 fb d4 86 3e 75 60 23 ed 30 0b 4b 5b 8b 40 ad 30 e8 21 03 69 ea 21 66 83 6d a8 7d 8e 98 f3 47 df 95 36 66 17 3d cf a9 ad 35 ab 43 84 ed fa 12 34 69 09 d2 e1 36 4f b8 b6 ae 26 Data Ascii: ]4[]CYAY8^n]/FHu_oAf%!gC#ygY2)lZzI=WbKYtjqB6Fu`M9.u]N15?-zKrDVfxU%H0>]NhO.g("lHm>u`#0K[@0!i!fm}G6f=5C4i6O&
2024-10-25 08:00:52 UTC	1369	IN	Data Raw: 0b ed 3a 1b d5 e0 4a 76 09 8e 05 e6 e0 f1 c4 39 b8 84 af e9 78 3e e6 2d 25 91 20 b0 8e e0 eb 44 01 ac 87 5a af 66 f5 c1 ba 5b 52 88 b3 c5 bc fa 96 20 b6 8b 8b d5 ef 6d 24 90 6e c5 03 31 4c 03 d2 7a f6 f5 29 3d f3 7e bf ec fb 7d de 21 1a 5f 02 6a d1 58 5b 2c 8a a9 ed be 96 59 7e 9d 62 a8 81 6d b5 9b 76 cb d0 b0 e9 22 48 fb 61 4b 93 26 79 43 c7 86 3f e6 0b c3 7d d1 5b e0 bd 93 f7 c3 41 04 e8 80 e4 03 bb 30 05 45 0f 55 21 a1 c8 32 9c 0a ef 87 43 c1 59 b8 35 bc 07 fe 6c f5 07 70 21 73 03 54 d3 28 41 32 fd 3f 04 20 ac 41 0c 00 77 71 d1 2d cd 01 2a f3 c0 a6 9a 38 78 33 bb f6 33 87 22 bb 7e 9f 43 87 81 ba 0d 37 ef 7d 19 50 3e 10 57 93 11 1d 1b bc d4 0b a0 ae ce 0a 6e 61 33 dd 91 c5 c3 ba 3b 39 63 bd 5d 5b 38 1c 72 f4 20 13 bc 00 54 ca 90 2a 42 e7 84 27 02 af 1f Data Ascii: :Jv9x>-% DZf[R m$n1Lz)=~}!_jX[,Y~bmv"HaK&yC?}[A0EU!2CY5lp!sT(A2? Awq-8x33"~C7}P>Wna3;9c][8r TB'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49748	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:00:52 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-25 08:00:53 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=204250 Date: Fri, 25 Oct 2024 08:00:52 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-25 08:00:53 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49749	104.26.10.58	443	5680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:00:53 UTC	557	OUT	GET /Static/images/Branding/error-page.png HTTP/1.1 Host: www.timesheetz.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ApplicationGatewayAffinityCORS=c7581c187614b8cc3302bd4d87317ffa; ApplicationGatewayAffinity=c7581c187614b8cc3302bd4d87317ffa; ASP.NET_SessionId=h315axbt1enderutazvarthe
2024-10-25 08:00:53 UTC	650	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:00:53 GMT Content-Type: image/png Content-Length: 45601 Connection: close last-modified: Fri, 21 Oct 2022 11:48:02 GMT etag: "0c543f942e5d81:0" x-powered-by: ASP.NET CF-Cache-Status: HIT Age: 4550 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kIWNElS6oagAfkflei1fUIJ9BRqygaiVql65jbDUbNAGtBwgt6qju9eZo9XS7wNw41108I%2BKKDeQKEOOj6spJWYWm26LHrwEbhu5dNtR7JA2Kni3VG8JSQGXYAhU6q1iWiTAGQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d80acef6e8b4799-DFW
2024-10-25 08:00:53 UTC	719	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 6a 00 00 01 75 08 06 00 00 00 c1 58 a0 ad 00 00 00 04 67 41 4d 41 00 00 af c8 37 05 8a e9 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 b1 b3 49 44 41 54 78 da ec bd 07 b0 24 c7 79 26 f8 67 55 7b f3 bc 1b 6f 31 18 03 cc 00 43 78 80 0e 14 29 12 24 41 8a de 88 4e 10 45 86 44 85 24 4a 1b 2b ad bb 50 ec c5 6a 6f 63 b5 b1 ba b8 3b de 9e 56 52 48 5a 43 49 94 28 6a 65 68 45 81 1e 84 07 88 c1 0c 66 30 ee cd 3c 6f da 77 97 cd fb ff 6c f3 da 54 75 57 db d7 dd af 72 50 78 6d aa cb 64 65 7e f9 e5 97 bf 61 9c 73 70 8b 5b dc e2 16 b7 f4 6f 91 dc 2a 70 8b 5b dc e2 96 fe 2e 9e e2 8b b7 3c f3 fb 43 77 73 13 be 68 cd 67 5e c9 03 21 39 00 8c 49 a0 Data Ascii: PNGIHDRjuXgAMA7tEXtSoftwareAdobe ImageReadyqe<IDATx$y&gU{o1Cx)$ANED$J+Pjoc;VRHZCI(jehEf0<owlTuWrPxmde~asp[o*p[.<Cwshg^!9I
2024-10-25 08:00:53 UTC	1369	IN	Data Raw: bb b0 8d ad e4 36 61 43 4b 8a eb 99 c3 f7 69 ac df a5 dc 3a 7e 37 89 d7 77 53 1c e3 10 b6 a1 11 dc ff 62 e2 ba 68 97 0a 3e 6f 6a 3b 87 22 7b f0 ef 92 d8 e7 d6 91 fd d8 f6 d6 20 80 d7 4e d7 b5 8a 75 4e 65 16 f7 2f 7e 4e c5 c0 7f 2f c7 af 61 bb dc 23 ea 83 9e cd 91 91 bd b0 8a ed b0 d4 d7 bc a3 70 31 39 0f 07 23 bb c0 23 cb b0 81 ed 4a 1c 2b 34 25 ee 53 33 35 d1 4e 8e e0 31 e8 b9 d3 33 de c4 76 b7 81 75 75 7c e4 80 78 ce c0 38 28 ba 2a 8e 4f 6d 65 16 fb 10 f5 3b 2a aa a1 61 9f 94 c5 eb 38 fe 06 9f 23 c8 d8 56 64 26 63 dd 98 e2 78 d8 2e 70 1f 49 fc 2d 2a 05 fe c2 3d 0c 62 f9 83 e3 8f d6 02 b5 5b dc d2 a3 c2 68 dc a2 31 b3 b0 f9 05 7e e6 3f f3 14 5e 4b 85 8d 15 de 33 1c 68 c6 10 c4 0f 67 8c dc 21 ec 88 4a 1b 40 ed f5 68 9e 0d ec f8 69 7c 9b c2 4d 2e 9c c7 28 Data Ascii: 6aCKi:~7wSbh>oj;"{ NuNe/~N/a#p19##J+4%S35N13vuu\|x8(Ome;a8#Vd&cx.pI-*=b[h1~?^K3hg!J@hi\|M.(
2024-10-25 08:00:53 UTC	1369	IN	Data Raw: 92 b7 3f bd f1 f2 0c 82 f4 3e dc 67 3c a3 2b c2 8d 5b 80 31 cb bb 69 23 df 26 29 c4 ad c8 5e 03 77 c1 38 46 2a 93 48 74 53 2f 0c 9c e6 38 33 d8 38 fe 85 b8 92 3c 71 25 b5 70 5b 40 f6 7f 74 c4 1b 26 76 7d 0e 9f db df e0 33 7b 2e 0f f5 ee 3a a4 0b d4 6e e9 fb 92 d4 d3 30 e6 8d 8e 84 e4 e0 fd 9b 90 bc ed 62 f2 fa 2e c5 d4 ee ca ea ca dd 71 2d 15 8a 6b 69 01 e0 14 1f 81 80 99 62 39 b8 9d bb 3f 19 77 7e f0 a4 d7 f9 81 93 62 b5 a4 79 96 21 60 1f f6 30 cf 61 d5 d4 28 e6 ca ca a6 92 b8 db 2f fb 9f 0a 48 be cb 21 4f e0 19 7c b6 2f 19 c2 f3 dd 2d 2e 50 bb a5 bf 1e 22 93 7d c8 8c c9 c9 64 0a 59 f1 7d c8 a2 df b9 a9 26 4f 2f 67 d7 83 c4 b0 8b 12 06 05 9c aa 98 71 bb 20 dd f7 a5 f8 84 f2 01 88 b6 2c 6a 28 c8 d5 1a 98 33 f8 5c df 11 f5 86 de 3a 13 98 58 94 33 d2 77 70 Data Ascii: ?>g<+[1i#&)^w8F*HtS/838<q%p[@t&v}3{.:n0b.q-kib9?w~by!`0a(/H!O\|/-.P"}dY}&O/gq ,j(3\:X3wp
2024-10-25 08:00:53 UTC	1369	IN	Data Raw: db 7b 43 33 9f cc 19 da bf c7 af ff 1e f2 da b5 eb 30 e3 02 f5 40 cd 52 c8 bc e9 bd 06 37 ce 5e 4c dc 78 db a6 92 18 cf 1a 8a 98 4e 4a 8c 01 b8 9a 9e 5b 06 b1 61 17 f4 6b 02 6b c3 50 c6 16 32 6b 77 a6 f4 ec ef ec 0e 4c dd 6d 02 ff 5f b8 cb d3 b8 65 c0 5d 6c 74 81 ba cf 4b 18 b7 23 8a a9 7e 78 3e b3 f2 d8 f5 d4 f2 34 35 ea e2 42 a1 5b dc 32 0c cc ba 10 20 8c c2 ab 52 56 f5 c3 49 35 f3 8b fb 23 b3 27 11 9f bf 82 bb 7c 15 b7 79 17 ac 5d a0 ee bb 86 8b 2c 83 58 f4 54 4a cf 3d a8 18 fa 6f 6e 28 c9 7b 36 d4 b8 48 85 e5 2f 38 ac b8 a5 e5 0a de de e2 c2 8d 3d 78 48 32 02 08 02 b6 9e 0e 9d 8b 5d 7e 64 26 30 f1 48 c6 50 bf 10 95 03 ff 17 7e 7d 05 37 37 9f 63 07 a7 e9 6e 69 a3 1c 8a ee 61 8c 49 fb 24 26 fd e7 e7 63 af 7c e1 27 f1 57 ef c9 18 39 f0 4b 3e d7 6c a9 1e Data Ascii: {C30@R7^LxNJ[akkP2kwLm_e]ltK#~x>45B[2 RVI5#'\|y],XTJ=on({6H/8=xH2]~d&0HP~}77cniaI$&c\|'W9K>l
2024-10-25 08:00:53 UTC	1369	IN	Data Raw: b6 9c db f8 a5 94 96 89 50 ee 37 5f de fd 75 38 64 0e 66 fd c6 89 bc d1 14 30 db fd 86 35 7f cd fd 82 d5 bc 99 13 db 80 b9 15 80 37 0d de cc 5e 5a 61 ac 1e 68 17 3e e5 36 92 48 1f 82 36 c5 ca a1 82 60 4d 97 76 87 97 79 ff 0f 89 49 c1 b4 9e fd 9f 93 be 51 17 a8 77 5a a1 11 da e0 c6 ed 37 b3 ab bf 71 25 75 f3 03 49 35 13 a0 36 eb 61 f2 e0 80 b4 1d 30 d8 98 d3 31 d6 22 30 33 87 4c 99 b5 86 b0 6c 70 aa b7 79 30 b7 60 b5 cc e2 73 6e b5 6f 11 e0 79 ad 79 9f 15 70 57 5b 90 f0 32 94 67 cc c6 9d bd 4f 75 6c ea 87 19 3d 07 d7 d3 4b c7 54 53 fb 97 21 4f 40 9f f5 4f 7c 13 2f 78 73 a7 02 f5 50 c7 a3 26 40 66 35 cb 67 cc a7 98 da 1d 37 33 6b 9f 3b 17 bb f2 a1 44 01 a4 a5 61 d5 a3 7b 19 2f d9 8d d1 6c dd c3 1a d5 89 d5 77 52 87 9e 85 34 a8 d5 c6 40 37 75 b8 99 59 39 b5 Data Ascii: P7_u8df057^Zah>6H6`MvyIQwZ7q%uI56a01"03Llpy0`snoyypW[2gOul=KTS!O@O\|/xsP&@f5g73k;Da{/lwR4@7uY9
2024-10-25 08:00:53 UTC	1369	IN	Data Raw: ff 66 21 b3 76 36 6d 64 20 28 fb fa 9b 49 d7 a8 1b cc 5a aa 68 46 e6 a8 91 4d 9a c3 73 ab 9d 9c e9 ce 1d 96 36 fa 11 18 78 27 ee 85 59 d2 0b cb 9f b0 c6 d2 48 43 d9 98 d9 e8 d3 ac f6 f4 dc e6 60 25 95 83 b1 32 99 84 f7 8d 19 1f 2f b0 6a 8e a4 0c fb 7e 44 66 d2 a7 0f 45 76 99 51 4f e8 3f e2 35 2e bb 40 dd 3f 85 42 6e 9d 48 eb b9 7f 75 25 bd 70 67 52 4f 23 48 fb fb 53 93 b6 73 5a 69 14 d9 8e 35 b1 48 d8 ea 02 a1 a3 08 78 1d 02 64 d6 9d fa ec 2a 08 77 cd e1 a6 4a 54 ae 06 6e be d5 26 ea 39 df d8 2e 40 f2 da 67 5b 71 9c ea c0 4f 16 a0 cd ca 81 be 70 24 db c5 46 be 5d 5d 8b 41 c4 13 a4 d8 20 51 bc a8 4f 1d 1f 3d a8 84 e5 d0 bf c7 af d2 30 04 9a f5 a0 03 b5 8c 80 7c 26 67 28 bf fe 62 ec d5 47 14 43 0d 7a fb 75 e1 d0 92 f5 b2 0a f9 b2 21 83 76 62 c1 d1 ec e2 a0 Data Ascii: f!v6md (IZhFMs6x'YHC`%2/j~DfEvQO?5.@?BnHu%pgRO#HSsZi5Hxd*wJTn&9.@g[qOp$F]]A QO=0\|&g(bGCzu!vb
2024-10-25 08:00:53 UTC	1369	IN	Data Raw: 3d 12 cb 0f d8 94 93 91 85 a5 08 af c5 72 27 0c bb f4 b9 85 1c 52 3d b8 54 ba c0 57 c6 b3 e4 bc f7 60 ad 18 0a 9b cf 2c bd 2d 20 f9 97 f7 46 a6 fe 85 c9 79 62 60 80 ba 9f 0c c0 8b d7 22 31 e9 e8 8d cc f2 e7 af a6 16 4e 1b dc 94 fb ce 14 cf 6a 2a c0 a1 b1 19 5b 71 9f 2a a6 d2 52 63 1d 80 ac 1c 6e e9 c1 20 c1 db f8 4d b3 c7 b0 6a b7 4e c1 b6 0f da 2b 39 c4 c4 94 54 f8 0a bb f9 ce 88 37 70 75 d4 1b f9 02 07 33 dd cf cc a2 2f ad 3e 48 37 92 99 ec 59 cd 6d be fb 5c fc ea fb f1 23 7f 5f 98 e1 55 39 ab 6c c5 ec 2d 63 d3 55 f1 7a 99 95 2a d1 40 06 61 36 33 58 ab 63 95 e6 a6 cc f9 b5 57 9c cf 4a 42 61 ad 55 8b 7d 8c ea 1d 0a a0 ad c6 fe 6e f0 ec aa 4c f3 eb 3c 0c 3b a0 ac ba a8 02 c9 66 60 13 14 ac c1 e1 98 8d f9 28 b3 fb ac ec fc db 11 df 9a 88 20 c1 49 42 4b ed Data Ascii: =r'R=TW`,- Fyb`"1Nj[qRcn MjN+9T7pu3/>H7Ym\#_U9l-cUz*@a63XcWJBaU}nL<;f`( IBK
2024-10-25 08:00:53 UTC	1369	IN	Data Raw: 5b ae a4 16 3e 9a d1 95 51 af 24 6f 0f 48 b7 33 c7 90 aa f6 97 ba 7c 3e b7 b8 65 d0 e5 92 e2 5f d6 bf fd 84 50 c8 27 7b 61 4d 89 1f 9b cf 2c 7d 1a df ef 02 72 66 ec 07 58 e2 3d de 0c 6e 1e 47 46 fd bf c5 b4 64 44 e7 fa f6 69 e4 35 d1 ec b6 e4 0e 66 e7 e6 6d e5 c2 2b 35 26 80 d6 71 0d 98 b3 98 0d 76 52 87 53 0f f2 4e 4c bb eb 48 1b 9d 96 4e b6 55 37 e9 f2 b5 74 cd 05 df ca 7d bb 19 29 04 9a 91 42 6a 35 17 d6 8c 55 4f d1 8d dc 6e b6 6a 21 b4 30 a9 77 4d 81 cc 83 d3 7a 06 d6 72 b1 db 13 5a fa 33 6c 9b 63 f7 97 e0 05 67 16 3d d8 b8 f8 8b 7c 7a 14 6f fe 2d 57 92 8b 77 1b dc 90 a4 6d 06 e9 0a d7 70 a8 93 8d a5 41 a3 ac 87 87 95 a0 ef 40 8f b6 90 3a 9c 80 6e 37 01 a0 23 87 eb 17 4f c0 3e ba 87 ae e8 d9 cd 3c 33 1b a0 6c 0c d6 50 c3 1e ea 07 63 02 7b 4b a0 3a 9e Data Ascii: [>Q$oH3\|>e_P'{aM,}rfX=nGFdDi5fm+5&qvRSNLHNU7t})Bj5UOnj!0wMzrZ3lcg=\|zo-WwmpA@:n7#O><3lPc{K:
2024-10-25 08:00:53 UTC	1369	IN	Data Raw: 8f 41 ba 59 a9 c3 95 38 86 5e 0e e9 9a 6e 5d 2f 46 48 b3 9a 75 bd f6 5f 6f 41 bf 66 0d 0a 9a cb be de c6 98 b9 a9 25 21 67 e4 ee 43 9c bb 23 ff 79 67 ff 59 32 ea 0e 03 29 1d 6c e4 5a 7a e5 bd 49 3d bb 57 62 db a8 4b d7 59 11 b6 74 6a 71 90 42 ab 36 46 b5 03 c4 75 a8 9d b5 ac af b5 e2 f2 ed 02 f4 8e 60 d9 96 ae db 4d 9e c7 d6 39 c6 2e b6 75 5d b7 f3 c6 4e 31 35 3f 2d 7a 4b 72 8b 44 ba 56 87 06 8b bc 8b 9d 66 b9 78 b2 55 25 f6 48 d0 13 b8 30 ee 8b 3e 03 5d b4 00 ef 16 a3 9e 4e 68 e9 4f 2e 67 d7 8e 28 ba 22 82 9b 6c 0b 48 83 b5 85 87 6d d6 95 06 fb d4 86 3e 75 60 23 ed 30 0b 4b 5b 8b 40 ad 30 e8 21 03 69 ea 21 66 83 6d a8 7d 8e 98 f3 47 df 95 36 66 17 3d cf a9 ad 35 ab 43 84 ed fa 12 34 69 09 d2 e1 36 4f b8 b6 ae 26 e4 55 65 93 4c f5 6e 87 2e 4a c9 a5 03 e7 Data Ascii: AY8^n]/FHu_oAf%!gC#ygY2)lZzI=WbKYtjqB6Fu`M9.u]N15?-zKrDVfxU%H0>]NhO.g("lHm>u`#0K[@0!i!fm}G6f=5C4i6O&UeLn.J
2024-10-25 08:00:53 UTC	1369	IN	Data Raw: c4 39 b8 84 af e9 78 3e e6 2d 25 91 20 b0 8e e0 eb 44 01 ac 87 5a af 66 f5 c1 ba 5b 52 88 b3 c5 bc fa 96 20 b6 8b 8b d5 ef 6d 24 90 6e c5 03 31 4c 03 d2 7a f6 f5 29 3d f3 7e bf ec fb 7d de 21 1a 5f 02 6a d1 58 5b 2c 8a a9 ed be 96 59 7e 9d 62 a8 81 6d b5 9b 76 cb d0 b0 e9 22 48 fb 61 4b 93 26 79 43 c7 86 3f e6 0b c3 7d d1 5b e0 bd 93 f7 c3 41 04 e8 80 e4 03 bb 30 05 45 0f 55 21 a1 c8 32 9c 0a ef 87 43 c1 59 b8 35 bc 07 fe 6c f5 07 70 21 73 03 54 d3 28 41 32 fd 3f 04 20 ac 41 0c 00 77 71 d1 2d cd 01 2a f3 c0 a6 9a 38 78 33 bb f6 33 87 22 bb 7e 9f 43 87 81 ba 0d 37 ef 7d 19 50 3e 10 57 93 11 1d 1b bc d4 0b a0 ae ce 0a 6e 61 33 dd 91 c5 c3 ba 3b 39 63 bd 5d 5b 38 1c 72 f4 20 13 bc 00 54 ca 90 2a 42 e7 84 27 02 af 1f bd 0d 3e 34 fd 00 ec f5 4f 35 5d 0d 44 24 Data Ascii: 9x>-% DZf[R m$n1Lz)=~}!_jX[,Y~bmv"HaK&yC?}[A0EU!2CY5lp!sT(A2? Awq-8x33"~C7}P>Wna3;9c][8r TB'>4O5]D$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49754	104.26.10.58	443	5680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:00:54 UTC	1065	OUT	GET /Static/images/Branding/favicon.png HTTP/1.1 Host: www.timesheetz.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.timesheetz.net/EtzWeb/Error/AlreadyEtzSigned Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ApplicationGatewayAffinityCORS=c7581c187614b8cc3302bd4d87317ffa; ApplicationGatewayAffinity=c7581c187614b8cc3302bd4d87317ffa; ASP.NET_SessionId=h315axbt1enderutazvarthe; __utma=56068014.2104757465.1729843252.1729843252.1729843252.1; __utmc=56068014; __utmz=56068014.1729843252.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; ai_user=W7M+S\|2024-10-25T08:00:52.122Z; __utmb=56068014.2.9.1729843253088
2024-10-25 08:00:55 UTC	658	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:00:55 GMT Content-Type: image/png Content-Length: 2295 Connection: close last-modified: Fri, 21 Oct 2022 11:48:02 GMT etag: "0c543f942e5d81:0" x-powered-by: ASP.NET CF-Cache-Status: HIT Age: 501 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xDhrAENWxGvcpSr8c49heSj0Ls%2Fce6cmRIU%2FGPgqSgzINuI94VLf2uN%2BkW%2BXW7fVPJhc%2BQb22KuA3xbztWZfS4i3SCtBXjy3Di5RoG6XTNvYbZx%2BtsZkKykAikcuyxWXrX8KqQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d80acf7db576b5f-DFW
2024-10-25 08:00:55 UTC	711	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 04 67 41 4d 41 00 00 af c8 37 05 8a e9 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 08 89 49 44 41 54 78 da 9c 57 6b 6c 1c 57 15 3e 77 66 76 67 f6 bd f6 da a9 9d d8 4e 9a 47 f3 26 15 6d 09 24 12 01 92 b6 a9 44 0b 54 a2 84 04 9a 06 89 a6 aa a8 84 40 a0 42 fe 10 40 fc 08 ad 90 a8 0a 6d 29 52 23 a0 ad 54 55 91 12 55 fd 11 45 11 a5 85 86 36 44 4a 70 9b a4 b1 83 8d 53 3b 59 3f 76 d7 fb 9a 37 df b9 33 6b 8f 9b 4d 41 cc ea da 33 77 ee 3d 8f ef 7c e7 dc 33 e2 91 0b af 51 eb 12 f8 15 cd 19 12 42 90 ed b9 98 f1 c9 50 e2 e4 f8 2e ee 88 2c d7 2e 54 ec ea e6 ba 6b de d1 70 cc 65 1e 79 1d 02 Data Ascii: PNGIHDR szzgAMA7tEXtSoftwareAdobe ImageReadyqe<IDATxWklW>wfvgNG&m$DT@B@m)R#TUUE6DJpS;Y?v73kMA3w=\|3QBP.,.Tkpey
2024-10-25 08:00:55 UTC	1369	IN	Data Raw: 0b 50 54 20 dd f1 1d 6d b0 34 fc 44 cd 6d aa 75 b7 19 20 70 a5 71 ed 7e 14 a0 2d 2a 56 4a 96 4b 6f 45 38 22 c2 44 24 e4 d8 f7 cd ce 4f d2 2f fb be 44 7d b1 b4 2c 38 d1 8c 6c ed 53 94 08 8f e0 18 67 03 eb 42 9a de cb 28 28 2e 58 32 d1 98 de e3 87 1b 15 2d d8 44 d8 e0 82 49 36 39 e4 89 85 a9 c3 ca 3a 55 83 be bb 78 27 3d d0 bd 95 3e 97 59 45 4d df 9e 33 ce c3 5f 1e 3e f6 c9 bd 60 9a 17 86 85 b3 89 17 15 cd d2 5e e6 82 56 73 1b cb a6 cc f2 76 95 82 3c 67 e5 0e 14 73 f9 5d 12 cf 53 46 d3 69 dc 2e 53 d9 6d 50 52 d1 25 08 1e de 65 95 98 2c af 7c a5 50 ae 0d c4 93 d1 34 30 ef b7 58 1e 16 4b ce 0e 5f 86 cc 91 3a 54 55 21 54 d6 3b cb 76 6d a9 56 b2 ab 5b 2d cf 4e 31 f9 58 39 22 4a 8b f5 2c fd a0 7f 07 ed cc 6f a0 8c 92 a0 51 73 9a 9e 2b be 41 2f 4e fd 9d 18 b1 1f Data Ascii: PT m4Dmu pq~-*VJKoE8"D$O/D},8lSgB((.X2-DI69:Ux'=>YEM3_>`^Vsv<gs]SFi.SmPR%e,\|P40XK_:TU!T;vmV[-N1X9"J,oQs+A/N
2024-10-25 08:00:55 UTC	215	IN	Data Raw: d7 42 26 2c 9c 8e 7e 13 b4 fd 32 e2 c2 01 88 ac 55 99 fe 7d eb 72 cb bf 98 12 89 cb a6 e9 92 0d 41 2e 0b b6 03 48 83 f0 84 21 0a 61 66 a5 fc df c1 1a 13 b9 9e f4 13 c3 eb 33 cb ef 59 91 e9 fb 36 d4 3a 5e 9b f8 69 37 22 2f 3a 64 ea 8c 67 5e d3 95 d8 5b f8 c4 da 85 e6 e1 a1 aa 5d bf 03 c5 58 91 df 87 dc b0 8a 56 e0 83 fa c1 ce a1 86 78 29 35 79 aa 90 c8 1d 2e e8 b9 97 0c 35 5e 71 6f 70 76 fc d7 af 63 ae fb 90 5e ea 36 f2 cf 2c 32 3a 9f b5 3d 7b 63 d9 ae 6e 9f b5 eb eb f1 a9 d5 8d 1e 22 1d e6 7d d5 50 f5 62 4a 35 06 75 35 7e 1c 99 35 98 d2 12 be 1f f6 89 4a 78 54 b7 bb fe 23 c0 00 1d f8 5c fc 08 f1 25 fb 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: B&,~2U}rA.H!af3Y6:^i7"/:dg^[]XVx)5y.5^qopvc^6,2:={cn"}PbJ5u5~5JxT#\%IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49757	104.26.10.58	443	5680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:00:55 UTC	847	OUT	GET /Static/images/Branding/favicon.png HTTP/1.1 Host: www.timesheetz.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ApplicationGatewayAffinityCORS=c7581c187614b8cc3302bd4d87317ffa; ApplicationGatewayAffinity=c7581c187614b8cc3302bd4d87317ffa; ASP.NET_SessionId=h315axbt1enderutazvarthe; __utma=56068014.2104757465.1729843252.1729843252.1729843252.1; __utmc=56068014; __utmz=56068014.1729843252.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; ai_user=W7M+S\|2024-10-25T08:00:52.122Z; __utmb=56068014.2.9.1729843253088; ai_session=/KVMp\|1729843253127.8\|1729843253127.8
2024-10-25 08:00:55 UTC	658	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:00:55 GMT Content-Type: image/png Content-Length: 2295 Connection: close last-modified: Fri, 21 Oct 2022 11:48:02 GMT etag: "0c543f942e5d81:0" x-powered-by: ASP.NET CF-Cache-Status: HIT Age: 501 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=56k%2Bz4wcvKO2TnJyP64qla3hZhkkruGbyoWhKmWleVHujjiqqJ2f4ZuRqleIVPLec%2Bnw2Av5n3Mb4k0z5%2Fuv%2FnaKgC7%2BwaA4JYjdyPHnT%2FqAJGVT6mhYaqVNof1Xk0YIiqkP5g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d80acfcbc840b95-DFW
2024-10-25 08:00:55 UTC	711	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 04 67 41 4d 41 00 00 af c8 37 05 8a e9 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 08 89 49 44 41 54 78 da 9c 57 6b 6c 1c 57 15 3e 77 66 76 67 f6 bd f6 da a9 9d d8 4e 9a 47 f3 26 15 6d 09 24 12 01 92 b6 a9 44 0b 54 a2 84 04 9a 06 89 a6 aa a8 84 40 a0 42 fe 10 40 fc 08 ad 90 a8 0a 6d 29 52 23 a0 ad 54 55 91 12 55 fd 11 45 11 a5 85 86 36 44 4a 70 9b a4 b1 83 8d 53 3b 59 3f 76 d7 fb 9a 37 df b9 33 6b 8f 9b 4d 41 cc ea da 33 77 ee 3d 8f ef 7c e7 dc 33 e2 91 0b af 51 eb 12 f8 15 cd 19 12 42 90 ed b9 98 f1 c9 50 e2 e4 f8 2e ee 88 2c d7 2e 54 ec ea e6 ba 6b de d1 70 cc 65 1e 79 1d 02 Data Ascii: PNGIHDR szzgAMA7tEXtSoftwareAdobe ImageReadyqe<IDATxWklW>wfvgNG&m$DT@B@m)R#TUUE6DJpS;Y?v73kMA3w=\|3QBP.,.Tkpey
2024-10-25 08:00:55 UTC	1369	IN	Data Raw: 0b 50 54 20 dd f1 1d 6d b0 34 fc 44 cd 6d aa 75 b7 19 20 70 a5 71 ed 7e 14 a0 2d 2a 56 4a 96 4b 6f 45 38 22 c2 44 24 e4 d8 f7 cd ce 4f d2 2f fb be 44 7d b1 b4 2c 38 d1 8c 6c ed 53 94 08 8f e0 18 67 03 eb 42 9a de cb 28 28 2e 58 32 d1 98 de e3 87 1b 15 2d d8 44 d8 e0 82 49 36 39 e4 89 85 a9 c3 ca 3a 55 83 be bb 78 27 3d d0 bd 95 3e 97 59 45 4d df 9e 33 ce c3 5f 1e 3e f6 c9 bd 60 9a 17 86 85 b3 89 17 15 cd d2 5e e6 82 56 73 1b cb a6 cc f2 76 95 82 3c 67 e5 0e 14 73 f9 5d 12 cf 53 46 d3 69 dc 2e 53 d9 6d 50 52 d1 25 08 1e de 65 95 98 2c af 7c a5 50 ae 0d c4 93 d1 34 30 ef b7 58 1e 16 4b ce 0e 5f 86 cc 91 3a 54 55 21 54 d6 3b cb 76 6d a9 56 b2 ab 5b 2d cf 4e 31 f9 58 39 22 4a 8b f5 2c fd a0 7f 07 ed cc 6f a0 8c 92 a0 51 73 9a 9e 2b be 41 2f 4e fd 9d 18 b1 1f Data Ascii: PT m4Dmu pq~-*VJKoE8"D$O/D},8lSgB((.X2-DI69:Ux'=>YEM3_>`^Vsv<gs]SFi.SmPR%e,\|P40XK_:TU!T;vmV[-N1X9"J,oQs+A/N
2024-10-25 08:00:55 UTC	215	IN	Data Raw: d7 42 26 2c 9c 8e 7e 13 b4 fd 32 e2 c2 01 88 ac 55 99 fe 7d eb 72 cb bf 98 12 89 cb a6 e9 92 0d 41 2e 0b b6 03 48 83 f0 84 21 0a 61 66 a5 fc df c1 1a 13 b9 9e f4 13 c3 eb 33 cb ef 59 91 e9 fb 36 d4 3a 5e 9b f8 69 37 22 2f 3a 64 ea 8c 67 5e d3 95 d8 5b f8 c4 da 85 e6 e1 a1 aa 5d bf 03 c5 58 91 df 87 dc b0 8a 56 e0 83 fa c1 ce a1 86 78 29 35 79 aa 90 c8 1d 2e e8 b9 97 0c 35 5e 71 6f 70 76 fc d7 af 63 ae fb 90 5e ea 36 f2 cf 2c 32 3a 9f b5 3d 7b 63 d9 ae 6e 9f b5 eb eb f1 a9 d5 8d 1e 22 1d e6 7d d5 50 f5 62 4a 35 06 75 35 7e 1c 99 35 98 d2 12 be 1f f6 89 4a 78 54 b7 bb fe 23 c0 00 1d f8 5c fc 08 f1 25 fb 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: B&,~2U}rA.H!af3Y6:^i7"/:dg^[]XVx)5y.5^qopvc^6,2:={cn"}PbJ5u5~5JxT#\%IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49767	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:34 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:35 UTC	561	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:35 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 23 Oct 2024 06:30:03 GMT ETag: "0x8DCF32C20D7262E" x-ms-request-id: 39f98116-901e-0015-0fb5-25b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080135Z-16849878b78hz7zj8u0h2zng1400000009000000000084ap x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:35 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-25 08:01:35 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-25 08:01:35 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-25 08:01:35 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-25 08:01:35 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-25 08:01:35 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-25 08:01:35 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-25 08:01:35 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-25 08:01:35 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-25 08:01:35 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49772	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:36 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:36 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:36 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: cddcf92d-501e-008f-6a41-269054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080136Z-17c5cb586f65j4snyp1hqk5z2s00000001mg000000003c14 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:36 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49769	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:36 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:36 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:36 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 084b2ff6-801e-0067-68fd-24fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080136Z-r197bdfb6b4lbgfqwkqbrm672s00000002sg000000002dk4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:36 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49770	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:36 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:36 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:36 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 1a9c8bfd-301e-0000-1fee-25eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080136Z-16849878b78lhh9t0fb3392enw00000008ug000000006cyq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:36 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49771	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:36 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:36 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:36 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080136Z-16849878b78q4pnrt955f8nkx800000008xg0000000009q4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:36 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49768	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:36 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:36 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:36 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 331d1c77-401e-0029-354e-229b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080136Z-16849878b785f8wh85a0w3ennn00000008z0000000001mx6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:36 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49773	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:37 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:37 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:37 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 734838af-101e-0065-4be5-214088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080137Z-16849878b787sbpl0sv29sm89s0000000900000000008xwz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:37 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49774	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:37 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:37 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:37 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e5fe76b8-601e-0050-2e06-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080137Z-17c5cb586f6hhlf5mrwgq3erx8000000016000000000asfb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:37 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49775	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:37 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:37 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:37 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 9c258c29-601e-003e-66f5-243248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080137Z-r197bdfb6b429k2s6br3k49qn400000006b00000000093xz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:37 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49777	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:37 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:37 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:37 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: b0d76b6d-d01e-002b-3e84-2525fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080137Z-16849878b78x6gn56mgecg60qc00000001yg00000000gww0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:37 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49776	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:37 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:37 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:37 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: fef44d2e-901e-007b-639e-26ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080137Z-16849878b7898p5f6vryaqvp58000000015g000000001584 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:37 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49779	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:38 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:38 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:38 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0fe0dd21-c01e-0066-771c-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080138Z-16849878b78z5q7jpbgf6e9mcw000000091000000000882n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:01:38 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49778	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:38 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:38 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:38 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 82d491bf-801e-0048-1e3d-26f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080138Z-17c5cb586f67hhlz1ecw6yxtp000000002ng000000002gqz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:38 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49780	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:38 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:38 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:38 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 802631a9-901e-002a-57ad-247a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080138Z-15b8d89586fzhrwgk23ex2bvhw0000000310000000003hxa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:38 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49781	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:38 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:38 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:38 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: d7788b78-601e-0084-2f37-266b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080138Z-15b8d89586f989rkfw99rwd68g00000001hg000000001zks x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:38 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49782	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:38 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:38 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:38 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 7de7ed35-901e-005b-7c14-222005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080138Z-16849878b787wpl5wqkt5731b400000000w000000000h8x0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:38 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49784	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:38 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:39 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:39 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 7ae4e8d9-101e-005a-2134-26882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080139Z-r197bdfb6b49q4951yb663v3ds000000015000000000c6kf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:39 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49783	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:38 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:39 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:38 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 2fd6bd5d-d01e-007a-394f-26f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080138Z-16849878b78z5q7jpbgf6e9mcw00000008zg00000000b8cq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:01:39 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49785	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:38 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:39 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:39 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 4cd68789-d01e-0017-448e-21b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080139Z-16849878b78gvgmlcfru6nuc5400000008t000000000fm8d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:39 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49787	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:39 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:39 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:39 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 78a5d0bc-501e-005b-6da6-26d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080139Z-16849878b78s2lqfdex4tmpp7800000008wg00000000bwnr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:39 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49786	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:39 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:39 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:39 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: ec40f21c-901e-0067-494d-22b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080139Z-16849878b785jrf8dn0d2rczaw000000019000000000h2pp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:39 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49789	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:39 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:39 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:39 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: b26f0bb8-d01e-00ad-3518-26e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080139Z-15b8d89586fxdh48qknu9dqk2g000000044g0000000079yr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:39 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49790	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:39 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:39 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:39 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: c06bf5ff-a01e-0084-7ca6-269ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080139Z-16849878b78c5zx4gw8tcga1b400000008u0000000007xve x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:39 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49791	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:39 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:39 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:39 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: bbff353d-b01e-005c-270e-264c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080139Z-16849878b785dznd7xpawq9gcn00000001mg000000009b02 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:01:39 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49792	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:39 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:40 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:39 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 9e6b2b63-d01e-008e-7443-26387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080139Z-r197bdfb6b429k2s6br3k49qn4000000067g00000000czw7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:40 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49793	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:39 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:40 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:39 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 4af8c3a5-e01e-0033-1562-264695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080139Z-16849878b78k8q5pxkgux3mbgg00000008ug00000000c604 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:40 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49794	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:40 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:40 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:40 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: ea438a18-a01e-0053-68ef-258603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080140Z-17c5cb586f6qkkscezt8hb00a000000002d0000000003rkn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:40 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49795	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:40 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:40 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:40 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 111e84cc-b01e-003e-6d58-268e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080140Z-17c5cb586f67hhlz1ecw6yxtp000000002f000000000axp9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:40 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49796	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:40 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:40 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:40 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 1290ce53-d01e-002b-7905-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080140Z-16849878b786lft2mu9uftf3y400000001kg0000000029r5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:40 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49797	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:40 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:40 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:40 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 80263b1c-901e-002a-38ad-247a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080140Z-15b8d89586ffsjj9qb0gmb1stn00000004b0000000007knc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:40 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49798	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:40 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:41 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:40 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 131e52ce-d01e-002b-553b-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080140Z-16849878b78p8hrf1se7fucxk80000000150000000004xyp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:41 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49799	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:41 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:41 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:41 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: c4337264-b01e-0070-640b-221cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080141Z-16849878b78hh85qc40uyr8sc800000000eg000000002vqc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:41 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49801	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:41 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:41 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:41 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 488bf4d4-001e-00a2-2656-26d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080141Z-17c5cb586f67hhlz1ecw6yxtp000000002m0000000004hew x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:41 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49800	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:41 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:41 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:41 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 1f9c3bb8-d01e-0014-220b-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080141Z-16849878b785dznd7xpawq9gcn00000001ng000000007ek7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:41 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49802	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:41 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:41 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:41 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 27632888-301e-0096-61d8-21e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080141Z-16849878b786lft2mu9uftf3y400000001d000000000g1yq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:41 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49803	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:41 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:41 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:41 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: c1e5dbf7-401e-0029-2d43-269b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080141Z-r197bdfb6b4b4pw6nr8czsrctg00000000sg00000000db79 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:01:41 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49804	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:42 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:42 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:42 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 21f78716-701e-005c-7b46-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080142Z-17c5cb586f6tq56f8fz96wddtg000000029000000000az5f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:42 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49805	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:42 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:42 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:42 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 3f3879b0-501e-0035-0b40-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080142Z-16849878b78nx5sne3fztmu6xc000000015000000000bwev x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:42 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49806	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:42 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:42 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:42 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 42f5c72c-c01e-00a1-6643-267e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080142Z-16849878b78dsttbr1qw36rxs80000000900000000003rhb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:01:42 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49807	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:42 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:42 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:42 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 0a130610-701e-001e-4a1f-26f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080142Z-17c5cb586f6qs7hge7b080kmr00000000240000000009wr1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:42 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49808	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:42 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:42 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:42 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 44f017bc-601e-000d-6df3-242618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080142Z-15b8d89586f4zwgbgswvrvz4vs00000001ag00000000ba00 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:42 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49809	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:43 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:43 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:43 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 168e2c35-b01e-00ab-10df-25dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080143Z-15b8d89586fwzdd8urmg0p1ebs0000000af00000000093r0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:43 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49810	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:43 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:43 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:43 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 99f07890-301e-0051-29d2-2538bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080143Z-16849878b78k46f8kzwxznephs00000008s000000000dht5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:43 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49812	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:43 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:43 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:43 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 7d1d0a8a-d01e-0049-263b-26e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080143Z-r197bdfb6b4bq7nf8mnywhn9e000000001800000000090tm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:43 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49813	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:43 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:43 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:43 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 809859d7-601e-00ab-6828-2666f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080143Z-17c5cb586f6mhqqb91r8trf2c8000000012g000000005vq4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:43 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49811	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:43 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:43 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:43 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: a706a42d-501e-008c-4ef2-24cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080143Z-r197bdfb6b4tq6ldv3s2dcykm800000002sg000000009x4q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:43 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49814	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:44 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:44 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:44 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 352988b4-001e-0065-3a25-260b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080144Z-17c5cb586f6f69jxsre6kx2wmc00000002kg000000005t7c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:44 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49815	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:44 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:44 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:44 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 4a7bd2a8-301e-0096-209e-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080144Z-16849878b78p8hrf1se7fucxk80000000150000000004y0x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:44 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49816	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:44 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:44 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:44 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 34cbbb6f-001e-0046-0fdf-25da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080144Z-16849878b78bcpfn2qf7sm6hsn00000001y0000000001vf3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:01:44 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49818	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:44 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:44 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:44 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 531fb3e5-001e-00a2-2356-23d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080144Z-r197bdfb6b4hsj5bywyqk9r2xw00000001h0000000009022 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:44 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49817	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:44 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:44 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:44 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 94ed83ec-801e-0083-4bf2-24f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080144Z-15b8d89586flspj6y6m5fk442w000000064g0000000001zb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:44 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49819	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:45 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:45 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:45 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 03f0aa2d-d01e-007a-29f2-24f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080145Z-15b8d89586ff5l62aha9080wv000000001eg000000007a25 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:45 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49820	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:45 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:45 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:45 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 989513d0-f01e-0096-5813-2610ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080145Z-17c5cb586f6w4mfs5xcmnrny6n00000001pg000000007ykr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:45 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49821	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:45 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:45 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:45 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 8e6df999-101e-007a-77ef-24047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080145Z-15b8d89586ff5l62aha9080wv000000001k00000000031mr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:45 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49822	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:45 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:45 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:45 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 100b0a78-f01e-0003-754e-224453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080145Z-16849878b78wv88bk51myq5vxc00000000mg0000000030uq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:45 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49823	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:45 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:45 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:45 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 9016a745-201e-0096-70e6-25ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080145Z-16849878b78k8q5pxkgux3mbgg00000008yg000000002c7c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:45 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49824	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:45 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:46 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:46 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 04ff5eee-d01e-0049-7af2-24e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080146Z-15b8d89586fst84k5f3z220tec0000000fxg000000000ddq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:46 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49825	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:46 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:46 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:46 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 53fe968a-201e-0096-055e-26ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080146Z-16849878b785g992cz2s9gk35c00000008v000000000gbsn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:01:46 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49826	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:46 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:46 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:46 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 6cbbe1db-401e-0083-6516-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080146Z-16849878b787psctgubawhx7k800000008vg0000000009d5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:46 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49827	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:46 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:46 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:46 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: ee7a308c-c01e-00a1-620b-227e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080146Z-16849878b78z5q7jpbgf6e9mcw0000000900000000009bc8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:46 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49828	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:46 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:46 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:46 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 16b9c19d-f01e-0052-0d9e-269224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080146Z-16849878b785f8wh85a0w3ennn00000008tg00000000g8fr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:46 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49830	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:46 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:46 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:46 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 7842422a-e01e-003c-05ee-25c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080146Z-16849878b78p8hrf1se7fucxk8000000013g000000009dqz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:46 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49831	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:47 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:47 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:47 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: ffa56774-c01e-007a-6c38-26b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080147Z-16849878b78wv88bk51myq5vxc00000000f00000000032fm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:47 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49832	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:47 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:47 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:47 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: d91e6edc-501e-0035-3146-26c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080147Z-15b8d89586fmhkw429ba5n22m800000001m0000000005eq1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:47 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49833	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:47 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:47 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:47 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 97926059-b01e-0002-293b-261b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080147Z-17c5cb586f6gkqkwd0x1ge8t0400000000cg000000001qwt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:47 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49834	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:47 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:47 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:47 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: d9732123-901e-007b-1098-25ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080147Z-15b8d89586fsx9lfqmgrbzpgmg0000000g100000000004r3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:47 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49835	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:47 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:47 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:47 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: ff288f8c-c01e-007a-5a0e-26b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080147Z-17c5cb586f6z6tw6g7cmdv30m800000001e00000000020g5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:47 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49836	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:47 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:48 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:47 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: fa910cef-e01e-003c-72dd-21c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080147Z-16849878b78lhh9t0fb3392enw00000008qg00000000g72h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:48 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49837	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:47 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:48 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:48 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: cf3643bb-401e-0078-69a3-264d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080148Z-16849878b78jfqwd1dsrhqg3aw00000009300000000023hw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:48 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49838	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:48 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:48 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:48 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 4fea5f70-201e-0071-57f4-24ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080148Z-r197bdfb6b4lbgfqwkqbrm672s00000002kg00000000cvpx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:48 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49839	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:48 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:48 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:48 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 135f94f0-d01e-002b-2a55-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080148Z-16849878b78k8q5pxkgux3mbgg00000008y0000000004c51 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:48 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49840	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:48 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:48 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:48 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: a2526616-701e-0050-123d-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080148Z-r197bdfb6b4kq4j5t834fh90qn0000000c5000000000f6ug x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:48 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49841	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:48 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:48 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:48 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: a90b7fa3-401e-005b-4246-269c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080148Z-15b8d89586fst84k5f3z220tec0000000fvg000000002ndf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:48 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49842	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:48 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:49 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:48 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 23333e9c-201e-003f-1e18-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080148Z-17c5cb586f6q4vmqk5qfzgptrg00000002d000000000b30h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:49 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49843	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:48 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:49 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:48 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 2f548e5b-201e-003c-5d24-2130f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080148Z-16849878b78jfqwd1dsrhqg3aw00000008z000000000bb78 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:49 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49844	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:48 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:49 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:48 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 2034bdf9-701e-003e-3056-2679b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080148Z-16849878b787sbpl0sv29sm89s00000008zg0000000097nk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:49 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49845	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:49 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:49 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:49 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: bb28544f-801e-0047-7562-267265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080149Z-16849878b78hz7zj8u0h2zng1400000008y000000000cm2h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:49 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49846	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:49 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:49 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:49 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 28e57d84-e01e-003c-4a46-26c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080149Z-17c5cb586f6hp4zfqskwhb6z3000000002b0000000001nmq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:49 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49847	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:49 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:49 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:49 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: b96d8484-001e-005a-2cf4-24c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080149Z-15b8d89586f6nn8zb8x99wuenc00000001b0000000001yg4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:49 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49848	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:49 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:49 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:49 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 0eea03f1-d01e-0066-098a-21ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080149Z-16849878b78bcpfn2qf7sm6hsn00000001yg000000000ypb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:49 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49849	13.107.246.60	443	5680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:49 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:49 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:49 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: baf401f8-c01e-00ad-1d9e-26a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080149Z-16849878b787sbpl0sv29sm89s0000000900000000008yds x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:01:49 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49850	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:50 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:50 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:50 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 9c2fdade-c01e-002b-16f2-246e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080150Z-15b8d89586fxdh48qknu9dqk2g0000000460000000006ftb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:50 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49851	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:50 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:50 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:50 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 9bebe7cf-201e-0033-1046-26b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080150Z-r197bdfb6b49q4951yb663v3ds00000001ag000000002z44 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:50 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49852	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:50 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:50 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:50 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c2e82b32-d01e-005a-2b27-267fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080150Z-17c5cb586f6z6tw6g7cmdv30m800000001dg000000002570 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:50 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49853	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:50 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:50 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:50 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 0243abe0-001e-0028-29fb-25c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080150Z-16849878b78j5kdg3dndgqw0vg0000000220000000000btx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:50 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49854	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:50 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:51 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:51 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 9f682ba9-701e-006f-730e-26afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080151Z-17c5cb586f6qkkscezt8hb00a000000002f00000000013q6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:51 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49856	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:51 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:51 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:51 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cd04a713-f01e-003f-7315-26d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080151Z-15b8d89586fvpb597drk06r8fc0000000170000000007uxg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:51 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49857	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:51 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:51 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:51 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 20049dc1-d01e-0014-1b33-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080151Z-16849878b78jfqwd1dsrhqg3aw000000090g000000007pna x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:51 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49859	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:51 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:51 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:51 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 3c823cf0-801e-00a3-6533-267cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080151Z-16849878b786fl7gm2qg4r5y7000000000m0000000001sw3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:51 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49858	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:51 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:51 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:51 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 14889e7f-701e-0053-13f2-253a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080151Z-16849878b78lhh9t0fb3392enw00000008tg000000007r5t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:51 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49860	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:51 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:52 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:51 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 2edde2c3-c01e-002b-176a-266e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080151Z-16849878b78k46f8kzwxznephs00000008q000000000ku3a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:01:52 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49861	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:52 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:52 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:52 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 18e0c3bd-301e-001f-11f3-24aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080152Z-17c5cb586f6mhqqb91r8trf2c8000000013g00000000472r x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:52 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49862	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:52 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:52 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:52 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 998f428a-101e-007a-649d-24047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080152Z-15b8d89586flzzks5bs37v2b9000000004e00000000071se x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:52 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49864	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:52 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:52 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:52 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 04bfc9b2-001e-0017-54ad-260c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080152Z-16849878b78hh85qc40uyr8sc800000000eg000000002w0n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:01:52 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49863	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:52 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:52 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:52 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 5ec9f71f-c01e-0082-7a31-26af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080152Z-15b8d89586flspj6y6m5fk442w000000063g0000000016ma x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:52 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49865	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:52 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:52 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:52 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 31e4fe8c-301e-0033-38f2-21fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080152Z-16849878b785g992cz2s9gk35c00000008w000000000e3ge x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:52 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49866	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:53 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:53 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:53 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: f0c9e92d-201e-0000-1199-25a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080153Z-16849878b787wpl5wqkt5731b400000000zg00000000a3d1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:53 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49867	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:53 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:53 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:53 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 39bddf94-501e-0016-02f5-24181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080153Z-r197bdfb6b49q4951yb663v3ds000000017g0000000088by x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:53 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49868	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:53 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:53 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:53 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: cbb0b495-901e-005b-56e4-212005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080153Z-16849878b78s2lqfdex4tmpp7800000008xg000000009st9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:53 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49869	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:53 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:53 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:53 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 22d1952d-101e-007a-6d50-26047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080153Z-r197bdfb6b4gx6v9pg74w9f47s0000000210000000005qqy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:01:53 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49870	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:53 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:53 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:53 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 3bd815fc-c01e-0066-6070-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080153Z-16849878b78fmrkt2ukpvh9wh400000008tg00000000e0tv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:01:53 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49871	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:53 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:54 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:54 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 62bbcfe8-a01e-0032-2ffc-241949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080154Z-r197bdfb6b4hdk8h12qtxfwscn00000000t000000000ak6g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:54 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49872	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:54 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:54 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:54 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 0c5aa6f6-c01e-000b-5d92-25e255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080154Z-16849878b785jrf8dn0d2rczaw00000001e00000000051xf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:54 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49873	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:54 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:54 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:54 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 9a0db76d-d01e-0017-4396-25b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080154Z-16849878b78jfqwd1dsrhqg3aw000000091g000000005n92 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:01:54 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49874	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:54 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:54 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:54 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 654233af-a01e-001e-0b27-2149ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080154Z-16849878b78dsttbr1qw36rxs8000000090g000000002hsh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:54 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49875	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:54 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:54 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:54 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: ded904a3-601e-000d-0f3d-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080154Z-17c5cb586f6qs7hge7b080kmr00000000240000000009x0x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:54 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49876	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:54 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:54 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:54 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: b2ef1849-d01e-00ad-023d-26e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080154Z-r197bdfb6b4hdk8h12qtxfwscn00000000wg000000004k7y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:54 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49877	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:55 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:55 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:55 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 0cf7dd75-a01e-003d-3e63-2698d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080155Z-16849878b78smng4k6nq15r6s400000001v000000000213g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:55 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49878	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:55 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:55 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:55 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: e8b9c1e5-a01e-001e-79f2-2449ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080155Z-15b8d89586fxdh48qknu9dqk2g00000004a0000000000e9y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:55 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49879	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:55 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:55 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:55 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 6d89998c-401e-0083-425b-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080155Z-17c5cb586f6tq56f8fz96wddtg000000028g00000000b819 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:55 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49880	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:55 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:55 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:55 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: d2bdf8af-801e-0078-25f4-24bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080155Z-r197bdfb6b4gqmwlpwzzs5v83s00000001ag000000001vd0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:55 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49882	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:56 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:56 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:56 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 5a317ae7-601e-005c-1a25-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080156Z-15b8d89586fdmfsg1u7xrpfws000000004g0000000004aua x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:56 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49883	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:56 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:56 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:56 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 9800c975-801e-008c-0e2c-267130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080156Z-r197bdfb6b4kq4j5t834fh90qn0000000c800000000080sq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:56 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49884	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:56 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:56 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:56 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: baa41b4f-401e-00ac-2c28-210a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080156Z-16849878b78s2lqfdex4tmpp7800000008xg000000009sxz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:56 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49885	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:56 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:56 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:56 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 989b5e1d-301e-003f-2bee-25266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080156Z-16849878b78smng4k6nq15r6s400000001ng00000000k28m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:01:56 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49881	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:56 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:56 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:56 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 22a25694-101e-007a-3b3f-26047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080156Z-r197bdfb6b4b4pw6nr8czsrctg00000000y0000000002txr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:56 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49886	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:57 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:57 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:57 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 5ece5f0b-101e-0028-1a52-268f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080157Z-r197bdfb6b4hsj5bywyqk9r2xw00000001fg00000000ckep x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:01:57 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49887	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:57 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:57 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:57 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 26ef0c66-a01e-0070-7425-26573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080157Z-r197bdfb6b4lbgfqwkqbrm672s00000002p0000000008nqr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:57 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49888	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:57 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:57 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:57 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: ccbf99dc-401e-0035-1c33-2682d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080157Z-17c5cb586f6mhqqb91r8trf2c80000000100000000009k44 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:57 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49889	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:57 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:57 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:57 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: efa6dde7-e01e-0071-750c-2208e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080157Z-16849878b785dznd7xpawq9gcn00000001m000000000ap28 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:57 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49890	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:57 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:57 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:57 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 36aee691-501e-0047-745d-26ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080157Z-16849878b78fssff8btnns3b1400000000gg000000002b5s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:01:57 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49891	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:57 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:58 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:57 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 474bc074-b01e-0002-67b0-201b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080157Z-16849878b78q4pnrt955f8nkx800000008r000000000e456 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:58 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49892	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:57 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:58 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:58 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 8b373834-501e-008c-26e4-21cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080158Z-16849878b787sbpl0sv29sm89s000000090g000000008gqd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:58 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49893	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:58 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:58 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:58 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 697bb720-201e-0071-0781-25ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080158Z-16849878b78jfqwd1dsrhqg3aw000000092g0000000034rk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:58 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49894	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:58 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:58 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:58 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 622dd3a6-e01e-0003-140d-260fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080158Z-16849878b785jrf8dn0d2rczaw00000001g00000000011gu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:58 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49895	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:58 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:58 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:58 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 3d4cb055-601e-0097-01e5-21f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080158Z-16849878b786vsxz21496wc2qn0000000920000000004e4s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:58 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49896	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:58 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:58 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:58 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 53cea195-601e-0084-75f3-246b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080158Z-r197bdfb6b4bq7nf8mnywhn9e000000001cg00000000149d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:58 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49897	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:58 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:59 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:58 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: f2380685-a01e-0002-0958-265074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080158Z-17c5cb586f6g6g2sbe6edp75y4000000028g0000000033k4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:59 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49898	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:58 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:59 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:59 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: d17b1da0-901e-0064-5127-26e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080159Z-17c5cb586f62blg5ss55p9d6fn00000000ng00000000bfp0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:59 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49899	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:59 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:59 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:59 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: c9ef38c2-001e-002b-2fff-2599f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080159Z-16849878b785dznd7xpawq9gcn00000001rg000000000s67 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:59 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49900	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:59 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:59 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:59 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: f7b99165-401e-0035-1ce4-2582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080159Z-16849878b788tnsxzb2smucwdc00000008ug00000000hwub x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:59 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49901	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:59 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:59 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:59 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: e20e9adc-401e-0083-18ae-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080159Z-16849878b78gvgmlcfru6nuc5400000008y0000000003naz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:01:59 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49902	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:59 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:01:59 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:59 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 366b13b4-c01e-0082-1a80-26af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080159Z-16849878b786lft2mu9uftf3y400000001mg0000000007bd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:01:59 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49903	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:59 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:00 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:59 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 4769d5f8-401e-0067-710e-2609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080159Z-16849878b785dznd7xpawq9gcn00000001mg000000009bp9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:00 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49904	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:59 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:00 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:01:59 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 0c61b981-a01e-003d-7c37-2698d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080159Z-15b8d89586fst84k5f3z220tec0000000fq000000000bmgv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:00 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49905	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:01:59 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:00 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:00 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 8111d5b4-601e-00ab-384d-2666f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080200Z-r197bdfb6b4b4pw6nr8czsrctg00000000t000000000c80w x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:00 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49906	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:00 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:00 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:00 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: b0947076-901e-0067-17f4-24b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080200Z-15b8d89586fx2hlt035xdehq580000000fv0000000006ug4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:02:00 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49907	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:00 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:00 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:00 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: e9bbe3b2-401e-005b-3496-259c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080200Z-15b8d89586flzzks5bs37v2b9000000004m0000000000uce x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:00 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49908	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:00 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:00 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:00 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 8b819aaa-a01e-0084-563d-269ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080200Z-15b8d89586f8nxpt6ys645x5v000000001a000000000b52u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:00 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49909	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:00 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:00 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:00 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: c583980c-101e-008e-1237-26cf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080200Z-17c5cb586f65j4snyp1hqk5z2s00000001k0000000005aha x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:00 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 600, Parent PID: 3756

General

Target ID:	0
Start time:	04:00:41
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5680, Parent PID: 600

General

Target ID:	2
Start time:	04:00:44
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2496 --field-trial-handle=2464,i,11157100231109898546,10681944756199115181,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6316, Parent PID: 3756

General

Target ID:	3
Start time:	04:00:46
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.timesheetz.net/EtzWeb/u/a3fc03fa61"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.timesheetz.net/EtzWeb/u/a3fc03fa61

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 50

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 600, Parent PID: 3756

General

Windows Analysis Report
https://www.timesheetz.net/EtzWeb/u/a3fc03fa61