Edit tour

Windows Analysis Report
http://s.ksrndkehqnwntyxlhgto.com

Overview

General Information

Sample URL:	http://s.ksrndkehqnwntyxlhgto.com
Analysis ID:	1541944
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3732 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3980 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2416 --field-trial-handle=2232,i,5194111989753532047,8404869072147356295,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6308 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://s.ksrndkehqnwntyxlhgto.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: application/xmlTransfer-Encoding: chunkedConnection: closeDate: Fri, 25 Oct 2024 08:55:11 GMTServer: AmazonS3X-Cache: Error from cloudfrontVia: 1.1 bc841916063a49c638b48e73f77a28e8.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA60-P5X-Amz-Cf-Id: NfyMtm4RqVkb3VQ_RpT0ILMtMBretTYtxiXmSasOZpND33rEb1n7sA==

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49787 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@17/4@8/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2416 --field-trial-handle=2232,i,5194111989753532047,8404869072147356295,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://s.ksrndkehqnwntyxlhgto.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2416 --field-trial-handle=2232,i,5194111989753532047,8404869072147356295,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s.ksrndkehqnwntyxlhgto.com	18.245.60.3	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
s-part-0017.t-0009.fb-t-msedge.net	13.107.253.45	true	false	unknown
www.google.com	142.250.185.228	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
http://s.ksrndkehqnwntyxlhgto.com/	false	unknown
https://s.ksrndkehqnwntyxlhgto.com/	false	unknown
https://s.ksrndkehqnwntyxlhgto.com/favicon.ico	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.228	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
18.245.60.90	unknown	United States	16509	AMAZON-02US	false
18.245.60.3	s.ksrndkehqnwntyxlhgto.com	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1541944
Start date and time:	2024-10-25 10:54:05 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 11s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://s.ksrndkehqnwntyxlhgto.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@17/4@8/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.67, 142.250.186.46, 64.233.184.84, 34.104.35.123, 93.184.221.240, 13.85.23.206, 192.229.221.95, 52.165.164.15, 172.217.16.195
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, fs.microsoft.com, accounts.google.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://s.ksrndkehqnwntyxlhgto.com

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 41

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	275
Entropy (8bit):	5.66578048057039
Encrypted:	false
SSDEEP:	6:TMVBd/ZbZjZvKtWRVzjmxTgYv2f5QA+gIE+XOIS3pia1tyian:TMHd9BZKtWRUVI5AevZD1tyia
MD5:	7216893E94F761870B8EAC600F1852DA
SHA1:	9FFAF5E0C828919A7D666C2DC70CF1EAD6D8E2AD
SHA-256:	7AAC69099B63D854518110B34942245B0360F306E8AC2249594AE9A496A091AB
SHA-512:	D103F27E3263BEFC45E73C2CF096EE520152EABDB75D2A645F78535E60A4A9DCD1E4D0A44033A8DFE6378A677F95EF0745A5A7F6F73F5C6CD87743B6A020A38C
Malicious:	false
Reputation:	low
URL:	https://s.ksrndkehqnwntyxlhgto.com/favicon.ico
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<Error><Code>AccessDenied</Code><Message>Access Denied</Message><RequestId>92TAT7W9MHN9E5NB</RequestId><HostId>F+89Xcy8Gu66uNRnoUefMe5YVTHrDKgsZSpt/dB62AKq/c27DJvnvD+Eu0jwoX1MKLKevRHdkhXGh5Jn+zEhhoJfNpCa1NI+ygXjXCw3KUU=</HostId></Error>

Chrome Cache Entry: 42

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	3.3841837197791884
Encrypted:	false
SSDEEP:	3:OHKW3Ae:OqOAe
MD5:	DC5BCBF7F9372CCC9AEDB581FE88EDFE
SHA1:	79097FE77C29B4CA590114BDD0331431A1EFC470
SHA-256:	D872E8E4176213EA84EBC76D8FB621C31B4CA116FD0A51258813E804FE110CA4
SHA-512:	1EA2F632E9647FBDE1DA45DB3F295620E3B8228E48C237134DE7ADCE74121F9F12B0A647D27A574B4172A93A4E86B9C1B5868C24ABA5F48253E6283EAB35F6F0
Malicious:	false
Reputation:	low
URL:	https://s.ksrndkehqnwntyxlhgto.com/
Preview:	Nothing to see here.

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 25, 2024 10:55:06.020143032 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 25, 2024 10:55:08.483684063 CEST	49735	80	192.168.2.4	18.245.60.3
Oct 25, 2024 10:55:08.484069109 CEST	49736	80	192.168.2.4	18.245.60.3
Oct 25, 2024 10:55:08.488991976 CEST	80	49735	18.245.60.3	192.168.2.4
Oct 25, 2024 10:55:08.489058971 CEST	49735	80	192.168.2.4	18.245.60.3
Oct 25, 2024 10:55:08.489202023 CEST	49735	80	192.168.2.4	18.245.60.3
Oct 25, 2024 10:55:08.489392042 CEST	80	49736	18.245.60.3	192.168.2.4
Oct 25, 2024 10:55:08.489448071 CEST	49736	80	192.168.2.4	18.245.60.3
Oct 25, 2024 10:55:08.494592905 CEST	80	49735	18.245.60.3	192.168.2.4
Oct 25, 2024 10:55:09.326101065 CEST	80	49735	18.245.60.3	192.168.2.4
Oct 25, 2024 10:55:09.357352972 CEST	49739	443	192.168.2.4	18.245.60.90
Oct 25, 2024 10:55:09.357425928 CEST	443	49739	18.245.60.90	192.168.2.4
Oct 25, 2024 10:55:09.357501984 CEST	49739	443	192.168.2.4	18.245.60.90
Oct 25, 2024 10:55:09.357786894 CEST	49739	443	192.168.2.4	18.245.60.90
Oct 25, 2024 10:55:09.357821941 CEST	443	49739	18.245.60.90	192.168.2.4
Oct 25, 2024 10:55:09.376045942 CEST	49735	80	192.168.2.4	18.245.60.3
Oct 25, 2024 10:55:10.203963995 CEST	443	49739	18.245.60.90	192.168.2.4
Oct 25, 2024 10:55:10.204265118 CEST	49739	443	192.168.2.4	18.245.60.90
Oct 25, 2024 10:55:10.204296112 CEST	443	49739	18.245.60.90	192.168.2.4
Oct 25, 2024 10:55:10.205619097 CEST	443	49739	18.245.60.90	192.168.2.4
Oct 25, 2024 10:55:10.205702066 CEST	49739	443	192.168.2.4	18.245.60.90
Oct 25, 2024 10:55:10.206747055 CEST	49739	443	192.168.2.4	18.245.60.90
Oct 25, 2024 10:55:10.206820965 CEST	443	49739	18.245.60.90	192.168.2.4
Oct 25, 2024 10:55:10.207014084 CEST	49739	443	192.168.2.4	18.245.60.90
Oct 25, 2024 10:55:10.207027912 CEST	443	49739	18.245.60.90	192.168.2.4
Oct 25, 2024 10:55:10.256373882 CEST	49739	443	192.168.2.4	18.245.60.90
Oct 25, 2024 10:55:10.351918936 CEST	49740	443	192.168.2.4	142.250.185.228
Oct 25, 2024 10:55:10.351970911 CEST	443	49740	142.250.185.228	192.168.2.4
Oct 25, 2024 10:55:10.352047920 CEST	49740	443	192.168.2.4	142.250.185.228
Oct 25, 2024 10:55:10.352216959 CEST	49740	443	192.168.2.4	142.250.185.228
Oct 25, 2024 10:55:10.352231026 CEST	443	49740	142.250.185.228	192.168.2.4
Oct 25, 2024 10:55:10.451431990 CEST	443	49739	18.245.60.90	192.168.2.4
Oct 25, 2024 10:55:10.452390909 CEST	443	49739	18.245.60.90	192.168.2.4
Oct 25, 2024 10:55:10.452480078 CEST	49739	443	192.168.2.4	18.245.60.90
Oct 25, 2024 10:55:10.452698946 CEST	49739	443	192.168.2.4	18.245.60.90
Oct 25, 2024 10:55:10.452742100 CEST	443	49739	18.245.60.90	192.168.2.4
Oct 25, 2024 10:55:10.534315109 CEST	49741	443	192.168.2.4	18.245.60.90
Oct 25, 2024 10:55:10.534364939 CEST	443	49741	18.245.60.90	192.168.2.4
Oct 25, 2024 10:55:10.534446955 CEST	49741	443	192.168.2.4	18.245.60.90
Oct 25, 2024 10:55:10.534719944 CEST	49741	443	192.168.2.4	18.245.60.90
Oct 25, 2024 10:55:10.534738064 CEST	443	49741	18.245.60.90	192.168.2.4
Oct 25, 2024 10:55:10.979891062 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:55:10.980001926 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 25, 2024 10:55:10.980092049 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:55:10.981760025 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:55:10.981792927 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 25, 2024 10:55:11.207693100 CEST	443	49740	142.250.185.228	192.168.2.4
Oct 25, 2024 10:55:11.237548113 CEST	49740	443	192.168.2.4	142.250.185.228
Oct 25, 2024 10:55:11.237576008 CEST	443	49740	142.250.185.228	192.168.2.4
Oct 25, 2024 10:55:11.239371061 CEST	443	49740	142.250.185.228	192.168.2.4
Oct 25, 2024 10:55:11.239450932 CEST	49740	443	192.168.2.4	142.250.185.228
Oct 25, 2024 10:55:11.244935036 CEST	49740	443	192.168.2.4	142.250.185.228
Oct 25, 2024 10:55:11.245050907 CEST	443	49740	142.250.185.228	192.168.2.4
Oct 25, 2024 10:55:11.297175884 CEST	49740	443	192.168.2.4	142.250.185.228
Oct 25, 2024 10:55:11.297199965 CEST	443	49740	142.250.185.228	192.168.2.4
Oct 25, 2024 10:55:11.342704058 CEST	49740	443	192.168.2.4	142.250.185.228
Oct 25, 2024 10:55:11.371603012 CEST	443	49741	18.245.60.90	192.168.2.4
Oct 25, 2024 10:55:11.372711897 CEST	49741	443	192.168.2.4	18.245.60.90
Oct 25, 2024 10:55:11.372735023 CEST	443	49741	18.245.60.90	192.168.2.4
Oct 25, 2024 10:55:11.373866081 CEST	443	49741	18.245.60.90	192.168.2.4
Oct 25, 2024 10:55:11.375984907 CEST	49741	443	192.168.2.4	18.245.60.90
Oct 25, 2024 10:55:11.376152039 CEST	49741	443	192.168.2.4	18.245.60.90
Oct 25, 2024 10:55:11.376157999 CEST	443	49741	18.245.60.90	192.168.2.4
Oct 25, 2024 10:55:11.376177073 CEST	443	49741	18.245.60.90	192.168.2.4
Oct 25, 2024 10:55:11.420228958 CEST	49741	443	192.168.2.4	18.245.60.90
Oct 25, 2024 10:55:11.843331099 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 25, 2024 10:55:11.843400955 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:55:11.850119114 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:55:11.850145102 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 25, 2024 10:55:11.850584984 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 25, 2024 10:55:11.905215025 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:55:11.913621902 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:55:11.955373049 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 25, 2024 10:55:12.015695095 CEST	443	49741	18.245.60.90	192.168.2.4
Oct 25, 2024 10:55:12.015831947 CEST	443	49741	18.245.60.90	192.168.2.4
Oct 25, 2024 10:55:12.015872955 CEST	49741	443	192.168.2.4	18.245.60.90
Oct 25, 2024 10:55:12.018147945 CEST	49741	443	192.168.2.4	18.245.60.90
Oct 25, 2024 10:55:12.018177032 CEST	443	49741	18.245.60.90	192.168.2.4
Oct 25, 2024 10:55:12.161263943 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 25, 2024 10:55:12.161355019 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 25, 2024 10:55:12.161416054 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:55:12.161621094 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:55:12.161649942 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 25, 2024 10:55:12.161669970 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:55:12.161678076 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 25, 2024 10:55:12.225239038 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:55:12.225276947 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 10:55:12.225472927 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:55:12.225832939 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:55:12.225853920 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 10:55:13.078504086 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 10:55:13.078598976 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:55:13.079741955 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:55:13.079763889 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 10:55:13.080092907 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 10:55:13.081389904 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:55:13.123337984 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 10:55:14.032041073 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 10:55:14.032118082 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 10:55:14.033210993 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:55:14.033210993 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:55:14.033210993 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:55:14.343233109 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 10:55:14.343310118 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 10:55:19.670969963 CEST	49744	443	192.168.2.4	4.175.87.197
Oct 25, 2024 10:55:19.671063900 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 25, 2024 10:55:19.671140909 CEST	49744	443	192.168.2.4	4.175.87.197
Oct 25, 2024 10:55:19.672961950 CEST	49744	443	192.168.2.4	4.175.87.197
Oct 25, 2024 10:55:19.672998905 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 25, 2024 10:55:20.805138111 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 25, 2024 10:55:20.805233002 CEST	49744	443	192.168.2.4	4.175.87.197
Oct 25, 2024 10:55:20.808511019 CEST	49744	443	192.168.2.4	4.175.87.197
Oct 25, 2024 10:55:20.808546066 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 25, 2024 10:55:20.808974981 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 25, 2024 10:55:20.858952999 CEST	49744	443	192.168.2.4	4.175.87.197
Oct 25, 2024 10:55:21.197356939 CEST	443	49740	142.250.185.228	192.168.2.4
Oct 25, 2024 10:55:21.197444916 CEST	443	49740	142.250.185.228	192.168.2.4
Oct 25, 2024 10:55:21.197575092 CEST	49740	443	192.168.2.4	142.250.185.228
Oct 25, 2024 10:55:21.686412096 CEST	49744	443	192.168.2.4	4.175.87.197
Oct 25, 2024 10:55:21.731331110 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 25, 2024 10:55:22.061840057 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 25, 2024 10:55:22.061892986 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 25, 2024 10:55:22.061913013 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 25, 2024 10:55:22.061950922 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 25, 2024 10:55:22.061952114 CEST	49744	443	192.168.2.4	4.175.87.197
Oct 25, 2024 10:55:22.061989069 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 25, 2024 10:55:22.062021017 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 25, 2024 10:55:22.062040091 CEST	49744	443	192.168.2.4	4.175.87.197
Oct 25, 2024 10:55:22.062040091 CEST	49744	443	192.168.2.4	4.175.87.197
Oct 25, 2024 10:55:22.062040091 CEST	49744	443	192.168.2.4	4.175.87.197
Oct 25, 2024 10:55:22.062047005 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 25, 2024 10:55:22.062067032 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 25, 2024 10:55:22.062067986 CEST	49744	443	192.168.2.4	4.175.87.197
Oct 25, 2024 10:55:22.062094927 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 25, 2024 10:55:22.062099934 CEST	49744	443	192.168.2.4	4.175.87.197
Oct 25, 2024 10:55:22.062138081 CEST	49744	443	192.168.2.4	4.175.87.197
Oct 25, 2024 10:55:22.062148094 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 25, 2024 10:55:22.108968973 CEST	49744	443	192.168.2.4	4.175.87.197
Oct 25, 2024 10:55:22.185573101 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 25, 2024 10:55:22.185717106 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 25, 2024 10:55:22.185827971 CEST	49744	443	192.168.2.4	4.175.87.197
Oct 25, 2024 10:55:22.814353943 CEST	49740	443	192.168.2.4	142.250.185.228
Oct 25, 2024 10:55:22.814379930 CEST	443	49740	142.250.185.228	192.168.2.4
Oct 25, 2024 10:55:22.912425995 CEST	49744	443	192.168.2.4	4.175.87.197
Oct 25, 2024 10:55:22.912482977 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 25, 2024 10:55:39.349605083 CEST	80	49736	18.245.60.3	192.168.2.4
Oct 25, 2024 10:55:39.349667072 CEST	49736	80	192.168.2.4	18.245.60.3
Oct 25, 2024 10:55:40.813344002 CEST	49736	80	192.168.2.4	18.245.60.3
Oct 25, 2024 10:55:40.819397926 CEST	80	49736	18.245.60.3	192.168.2.4
Oct 25, 2024 10:55:54.327258110 CEST	49735	80	192.168.2.4	18.245.60.3
Oct 25, 2024 10:55:54.333133936 CEST	80	49735	18.245.60.3	192.168.2.4
Oct 25, 2024 10:55:54.731463909 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:54.731528997 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:54.731602907 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:54.731899977 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:54.731937885 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.470671892 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.470753908 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.474148035 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.474170923 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.474414110 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.482485056 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.527334929 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.708462000 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.708482981 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.708539963 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.708566904 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.708592892 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.708620071 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.708640099 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.728426933 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.728445053 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.728507042 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.728523970 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.728646994 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.826361895 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.826380968 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.826442003 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.826468945 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.826495886 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.826517105 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.845463991 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.845491886 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.845560074 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.845577002 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.845603943 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.845624924 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.848014116 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.848027945 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.848093987 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.848109961 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.848772049 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.849756956 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.849803925 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.849838018 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.849857092 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.849880934 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.850018978 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.944216013 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.944236994 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.944283009 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.944298983 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.944327116 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.944348097 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.962599993 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.962619066 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.962688923 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.962703943 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.962758064 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.964696884 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.964711905 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.964770079 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.964785099 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.964857101 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.966404915 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.966420889 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.966481924 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.966495991 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.966595888 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.969902992 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.969918966 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.969975948 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.969986916 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.970040083 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.970040083 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.970072985 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.970093966 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.970129013 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.970139980 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.970165014 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.970186949 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.970443964 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.970478058 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.970513105 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.970525026 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:55.970551968 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:55.970654964 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.061553001 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.061630011 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.061655045 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.061683893 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.062002897 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.062036991 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.062062979 CEST	49750	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.062096119 CEST	443	49750	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.110944986 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.110972881 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.111186028 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.112867117 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.112899065 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.113012075 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.114228010 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.114250898 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.114347935 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.114516020 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.114530087 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.115179062 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.115187883 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.115390062 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.115498066 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.115510941 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.115586042 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.115593910 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.115648031 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.115663052 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.117342949 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.117351055 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.117413998 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.117743969 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.117753983 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.845985889 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.846489906 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.846508026 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.846919060 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.846950054 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.846955061 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.847340107 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.847359896 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.847765923 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.847770929 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.850605965 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.851092100 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.851099968 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.851339102 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.851342916 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.851959944 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.852250099 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.852262974 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.852606058 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.852612019 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.866394997 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.866683960 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.866695881 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.867022038 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.867026091 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.973325014 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.973381042 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.973453999 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.973462105 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.973510027 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.973737955 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.973747969 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.973774910 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.973778009 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.973804951 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.973808050 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.976720095 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.976753950 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.977169991 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.977169991 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.977199078 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.980123043 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.980153084 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.980247974 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.980256081 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.980274916 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.980353117 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.980410099 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.980410099 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.980416059 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.980420113 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.980773926 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.980825901 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.980933905 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.980942965 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.980998993 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.981020927 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.981129885 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.981129885 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.981142998 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.981153965 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.981158018 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.982490063 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.982575893 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.982894897 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.982904911 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.982939959 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.982959032 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.983092070 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.983094931 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.983102083 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.983134985 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.984148026 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.984288931 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.984355927 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.984375954 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.984375954 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.984380960 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.984384060 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.986162901 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.986188889 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:56.986350060 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.986500978 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:56.986529112 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:57.000094891 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:57.000502110 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:57.000550985 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:57.000579119 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:57.000586033 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:57.000592947 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:57.000597000 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:57.002373934 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:57.002419949 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:57.002507925 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:57.002635956 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:57.002661943 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.022145987 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.022166014 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.022881985 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.022900105 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.023804903 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.023809910 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.024477959 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.024542093 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.025415897 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.025432110 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.026674032 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.026993036 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.027400970 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.027406931 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.028031111 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.028034925 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.028243065 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.028301001 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.029083967 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.029099941 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.153877020 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.154618979 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.154687881 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.154823065 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.154860020 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.154886007 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.154901028 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.159969091 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.160093069 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.160146952 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.160571098 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.160602093 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.160722017 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.160832882 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.160845041 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.160854101 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.160857916 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.162271023 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.162297964 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.163639069 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.163702011 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.163774014 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.164072990 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.164215088 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.164343119 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.164366961 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.164370060 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.164438009 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.164452076 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.164452076 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.164475918 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.164499044 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.164921999 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.164947033 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.167432070 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.167452097 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.167551041 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.167798042 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.167824030 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.168128014 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.168133974 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.168142080 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.168144941 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.170490026 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.170520067 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.170670986 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.170799971 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.170826912 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.739106894 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.739680052 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.739747047 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.739994049 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.740010023 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.891990900 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.893095970 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.893130064 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.894279957 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.894294977 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.911988020 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.912065029 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.912132978 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.912220001 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.913009882 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.913033009 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.914072037 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.914083958 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.914191008 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.914191008 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.914226055 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.914248943 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.919744015 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.919794083 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.919859886 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.920011997 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.920032024 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.928606033 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.944077969 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.944120884 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:58.945059061 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:58.945072889 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.013411999 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.014147043 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.014163971 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.015357018 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.015368938 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.020253897 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.020354986 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.020451069 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.020908117 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.020932913 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.020962954 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.020978928 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.025754929 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.025794029 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.026078939 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.026285887 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.026312113 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.046797991 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.046927929 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.047019958 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.047061920 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.047077894 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.047107935 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.047120094 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.052654982 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.052673101 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.052825928 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.053083897 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.053100109 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.077130079 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.077269077 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.077586889 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.078233957 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.078233957 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.078277111 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.078362942 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.084156036 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.084178925 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.084261894 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.084527969 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.084539890 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.146554947 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.146716118 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.146938086 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.147110939 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.147110939 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.147130966 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.147152901 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.149806976 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.149821043 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.150053978 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.150226116 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.150239944 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.419585943 CEST	49770	443	192.168.2.4	4.175.87.197
Oct 25, 2024 10:55:59.419626951 CEST	443	49770	4.175.87.197	192.168.2.4
Oct 25, 2024 10:55:59.419698954 CEST	49770	443	192.168.2.4	4.175.87.197
Oct 25, 2024 10:55:59.420258045 CEST	49770	443	192.168.2.4	4.175.87.197
Oct 25, 2024 10:55:59.420274973 CEST	443	49770	4.175.87.197	192.168.2.4
Oct 25, 2024 10:55:59.663599014 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.664180040 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.664208889 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.664908886 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.664921045 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.755528927 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.756242037 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.756297112 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.756769896 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.756788969 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.788645029 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.789093018 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.789115906 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.789511919 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.789518118 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.793019056 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.793076992 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.793131113 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.793309927 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.793323994 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.793334007 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.793339014 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.795896053 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.795933962 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.796005011 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.796225071 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.796241999 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.825054884 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.825535059 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.825551033 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.825905085 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.825911045 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.886389971 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.886540890 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.886612892 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.886682034 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.886723042 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.886750937 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.886766911 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.886811972 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.887192011 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.887202024 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.887630939 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.887636900 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.889688969 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.889727116 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.889950037 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.890105009 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.890120029 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.919083118 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.919496059 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.919543028 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.919640064 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.919646978 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.919656992 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.919661045 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.922256947 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.922306061 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.922415018 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.922542095 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.922569990 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.956182957 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.956590891 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.956698895 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.956742048 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.956753016 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.956763029 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.956773996 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.959840059 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.959877968 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 10:55:59.959952116 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.960217953 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:55:59.960228920 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.113578081 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.113740921 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.113842964 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.113874912 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.113890886 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.113903999 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.113909960 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.116548061 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.116590023 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.116673946 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.116799116 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.116830111 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.529449940 CEST	443	49770	4.175.87.197	192.168.2.4
Oct 25, 2024 10:56:00.529571056 CEST	49770	443	192.168.2.4	4.175.87.197
Oct 25, 2024 10:56:00.532741070 CEST	49770	443	192.168.2.4	4.175.87.197
Oct 25, 2024 10:56:00.532753944 CEST	443	49770	4.175.87.197	192.168.2.4
Oct 25, 2024 10:56:00.533020973 CEST	443	49770	4.175.87.197	192.168.2.4
Oct 25, 2024 10:56:00.553153038 CEST	49770	443	192.168.2.4	4.175.87.197
Oct 25, 2024 10:56:00.566627026 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.567193031 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.567224026 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.567919016 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.567928076 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.599340916 CEST	443	49770	4.175.87.197	192.168.2.4
Oct 25, 2024 10:56:00.631509066 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.632075071 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.632097960 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.632684946 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.632692099 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.702910900 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.703957081 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.704016924 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.704216957 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.704514027 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.704575062 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.705174923 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.705188990 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.705579996 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.705602884 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.705857038 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.708173037 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.708189964 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.708807945 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.708813906 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.711328030 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.711368084 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.711450100 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.711600065 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.711618900 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.763911009 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.764015913 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.764130116 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.764437914 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.764460087 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.764476061 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.764482021 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.768125057 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.768165112 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.768326044 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.768659115 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.768676043 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.838149071 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.838351965 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.838423967 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.838627100 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.838665962 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.838692904 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.838709116 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.838813066 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.839159966 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.839206934 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.840461016 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.840461016 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.840478897 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.840490103 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.843914986 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.843957901 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.844028950 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.844511986 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.844532013 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.845338106 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.845369101 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.845448017 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.845539093 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.845551014 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.861016035 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.861470938 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.861509085 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.862113953 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:00.862124920 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.929004908 CEST	443	49770	4.175.87.197	192.168.2.4
Oct 25, 2024 10:56:00.929085970 CEST	443	49770	4.175.87.197	192.168.2.4
Oct 25, 2024 10:56:00.929150105 CEST	49770	443	192.168.2.4	4.175.87.197
Oct 25, 2024 10:56:00.929158926 CEST	443	49770	4.175.87.197	192.168.2.4
Oct 25, 2024 10:56:00.929209948 CEST	443	49770	4.175.87.197	192.168.2.4
Oct 25, 2024 10:56:00.929240942 CEST	49770	443	192.168.2.4	4.175.87.197
Oct 25, 2024 10:56:00.929259062 CEST	49770	443	192.168.2.4	4.175.87.197
Oct 25, 2024 10:56:00.930381060 CEST	443	49770	4.175.87.197	192.168.2.4
Oct 25, 2024 10:56:00.930449009 CEST	49770	443	192.168.2.4	4.175.87.197
Oct 25, 2024 10:56:00.930449009 CEST	443	49770	4.175.87.197	192.168.2.4
Oct 25, 2024 10:56:00.930481911 CEST	443	49770	4.175.87.197	192.168.2.4
Oct 25, 2024 10:56:00.930506945 CEST	49770	443	192.168.2.4	4.175.87.197
Oct 25, 2024 10:56:00.940531969 CEST	49770	443	192.168.2.4	4.175.87.197
Oct 25, 2024 10:56:00.940550089 CEST	443	49770	4.175.87.197	192.168.2.4
Oct 25, 2024 10:56:00.940560102 CEST	49770	443	192.168.2.4	4.175.87.197
Oct 25, 2024 10:56:00.940891981 CEST	443	49770	4.175.87.197	192.168.2.4
Oct 25, 2024 10:56:00.940984964 CEST	443	49770	4.175.87.197	192.168.2.4
Oct 25, 2024 10:56:00.941031933 CEST	49770	443	192.168.2.4	4.175.87.197
Oct 25, 2024 10:56:00.990920067 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.990992069 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:00.991056919 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.083235025 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.083265066 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.083290100 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.083306074 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.091846943 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.091908932 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.091989040 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.092978001 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.093022108 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.448465109 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.448854923 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.448889017 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.449249983 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.449258089 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.501779079 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.502183914 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.502213001 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.502624989 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.502633095 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.578903913 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.579364061 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.579376936 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.579735041 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.579773903 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.579780102 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.579893112 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.579951048 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.580050945 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.580074072 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.580086946 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.580094099 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.582551956 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.582623959 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.582727909 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.582871914 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.582890034 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.588831902 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.589140892 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.589162111 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.589518070 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.589524031 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.632925987 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.633081913 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.633133888 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.633157969 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.633176088 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.633188009 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.633194923 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.635310888 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.635387897 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.635468006 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.635601997 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.635631084 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.706212997 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.706384897 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.706445932 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.706492901 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.706511021 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.706523895 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.706530094 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.708990097 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.709023952 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.709233999 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.709363937 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.709378004 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.725111008 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.727922916 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.727986097 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.728065014 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.728065014 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.728108883 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.728136063 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.729967117 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.730004072 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.730062008 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.730204105 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.730222940 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.869137049 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.869775057 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.869832039 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:01.870377064 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:01.870388985 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.005309105 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.005484104 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.005574942 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.005664110 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.005665064 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.005711079 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.005738020 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.008007050 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.008102894 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.008248091 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.008387089 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.008419037 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.345372915 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.346043110 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.346061945 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.346489906 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.346493959 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.363176107 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.363533974 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.363596916 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.363941908 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.363956928 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.468067884 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.468679905 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.468703985 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.469090939 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.469099045 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.475392103 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.478116989 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.478183031 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.478246927 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.478260994 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.478288889 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.478295088 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.481439114 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.481477976 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.481571913 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.481777906 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.481800079 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.492304087 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.492713928 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.492722034 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.493195057 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.493247032 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.493247032 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.493252039 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.493315935 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.493397951 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.493397951 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.493442059 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.493468046 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.495743036 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.495850086 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.495934010 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.496115923 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.496153116 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.599900007 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.600243092 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.600310087 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.600425005 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.600436926 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.600451946 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.600456953 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.603878975 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.603920937 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.604024887 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.604207039 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.604226112 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.630229950 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.630383968 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.630489111 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.630645990 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.630661011 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.630681992 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.630687952 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.633238077 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.633306980 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.633510113 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.633703947 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.633738995 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.745472908 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.746027946 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.746076107 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.746777058 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.746790886 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.876260996 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.876532078 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.876699924 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.876773119 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.876773119 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.876811981 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.876836061 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.879827023 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.879878044 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:02.879946947 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.880233049 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:02.880250931 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.420025110 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.420998096 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.420999050 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.421040058 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.421067953 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.426764965 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.427187920 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.427594900 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.427596092 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.427659988 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.427704096 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.428518057 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.428518057 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.428543091 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.428560019 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.428581953 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.429267883 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.429267883 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.429287910 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.429296017 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.550312042 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.550354958 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.550640106 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.550640106 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.550692081 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.550715923 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.553636074 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.553692102 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.553878069 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.553937912 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.553951979 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.558583975 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.559025049 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.559165955 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.559263945 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.559278965 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.559318066 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.559323072 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.561388016 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.561610937 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.562119961 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.562139988 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.562177896 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.562267065 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.562287092 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.562308073 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.562335014 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.562344074 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.562346935 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.562359095 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.564321995 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.564392090 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.564512014 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.564723015 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.564749002 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.622786999 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.623254061 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.623270035 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.623668909 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.623672962 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.628720999 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.628844976 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.629035950 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.629035950 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.629081011 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.629090071 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.631153107 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.631179094 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.631355047 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.631419897 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.631433964 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.752266884 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.752444983 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.757649899 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.757649899 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.760251999 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.760255098 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.760273933 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.760292053 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:03.761673927 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.761853933 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:03.761882067 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.292646885 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.293718100 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.293718100 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.293786049 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.293839931 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.299263000 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.299937963 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.299937963 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.299999952 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.300043106 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.308762074 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.309454918 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.309456110 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.309479952 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.309489012 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.360249043 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.360929966 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.360929966 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.360939980 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.360949039 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.419178009 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.419655085 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.420012951 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.420012951 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.420012951 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.423337936 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.423382044 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.423682928 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.423682928 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.423726082 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.430588007 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.430640936 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.430722952 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.430845022 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.430845022 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.430877924 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.430919886 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.432765961 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.432806969 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.432944059 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.433036089 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.433064938 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.451410055 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.451560020 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.451634884 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.451711893 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.451720953 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.451750040 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.451756954 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.454418898 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.454451084 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.454556942 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.454787970 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.454806089 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.490946054 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.491347075 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.491405964 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.491461039 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.491465092 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.491478920 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.491483927 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.493938923 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.493963957 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.494045019 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.494226933 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.494254112 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.501708031 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.502124071 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.502161980 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.502507925 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.502521038 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.733724117 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.733797073 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.878782034 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.878921986 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.879081964 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.879143953 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.879173040 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.879196882 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.879211903 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.882503033 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.882534981 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:04.882600069 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.882854939 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:04.882869959 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.155530930 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.157371044 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.157409906 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.158766031 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.158778906 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.161562920 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.161983967 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.161998034 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.162400007 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.162408113 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.209575891 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.209985018 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.210002899 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.210341930 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.210350037 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.250334024 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.250737906 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.250798941 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.251107931 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.251122952 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.283613920 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.283770084 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.283860922 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.283989906 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.283989906 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.284051895 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.284080982 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.286874056 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.286906004 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.286995888 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.287184954 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.287199020 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.289987087 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.290275097 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.290349960 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.290384054 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.290384054 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.290397882 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.290409088 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.292417049 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.292449951 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.292747021 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.292915106 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.292931080 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.340936899 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.341154099 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.341243982 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.341294050 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.341303110 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.341311932 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.341316938 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.343416929 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.343430996 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.343512058 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.343595982 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.343605042 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.379996061 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.380083084 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.380203009 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.380279064 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.380320072 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.380351067 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.380367994 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.382514000 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.382599115 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.382761955 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.382982016 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.383019924 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.617340088 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.617913961 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.617948055 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.618268967 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.618273973 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.747471094 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.747699022 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.747857094 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.747886896 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.747900963 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.747931004 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.747937918 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.751694918 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.751732111 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:05.751879930 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.753072977 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:05.753091097 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.022212982 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.022799969 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.022810936 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.023251057 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.023255110 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.033632994 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.034008026 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.034030914 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.034636974 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.034642935 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.092535019 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.093136072 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.093148947 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.093355894 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.093359947 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.114025116 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.114588022 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.114650011 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.114809036 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.114826918 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.152879953 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.153177977 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.153300047 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.153419971 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.153419971 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.153434038 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.153441906 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.157067060 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.157114029 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.157223940 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.157390118 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.157401085 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.164689064 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.164880991 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.164959908 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.165994883 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.165998936 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.166007996 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.166011095 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.169014931 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.169049025 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.169147968 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.169354916 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.169367075 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.224802017 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.224958897 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.225090981 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.225090981 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.225183964 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.225191116 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.227960110 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.227973938 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.228110075 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.228276968 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.228288889 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.245986938 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.246258020 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.246345043 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.246428967 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.246428967 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.246470928 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.246500015 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.248933077 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.248961926 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.249125004 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.249283075 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.249293089 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.494813919 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.495376110 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.495400906 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.495770931 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.495776892 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.624800920 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.624979973 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.625106096 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.625183105 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.625199080 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.625207901 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.625212908 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.628201008 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.628231049 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.628310919 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.628536940 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.628551006 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.899699926 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.900238991 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.900254965 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.900693893 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.900698900 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.914706945 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.915095091 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.915112972 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.915427923 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.915433884 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.975044966 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.975488901 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.975512981 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.976099014 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.976104975 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.992588997 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.992973089 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.992983103 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:06.993454933 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:06.993458986 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.032902956 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.033123970 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.033186913 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.033248901 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.033267021 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.033277035 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.033282995 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.037997007 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.038017988 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.038170099 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.038290024 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.038300037 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.045130968 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.045383930 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.045459032 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.045538902 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.045558929 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.045567989 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.045574903 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.048261881 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.048347950 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.048439026 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.048593044 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.048630953 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.108613014 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.108774900 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.108867884 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.109812021 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.109821081 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.109838009 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.109842062 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.111907959 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.111921072 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.111984968 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.112174988 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.112184048 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.129864931 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.129939079 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.130001068 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.130119085 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.130129099 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.130136967 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.130140066 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.132373095 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.132457972 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.132548094 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.132716894 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.132755995 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.407284975 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.407726049 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.407747030 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.408200026 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.408204079 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.544522047 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.544675112 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.544773102 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.544842958 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.544852018 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.544864893 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.544868946 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.547621012 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.547698975 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.547777891 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.547995090 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.548029900 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.764980078 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.766026974 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.766040087 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.766598940 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.766606092 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.782479048 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.782850981 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.782883883 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.783232927 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.783246040 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.862049103 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.862374067 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.862405062 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.862706900 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.862910032 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.862920046 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.863229036 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.863243103 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.863794088 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.863797903 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.894562006 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.894627094 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.894697905 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.894880056 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.894896984 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.894905090 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.894911051 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.897537947 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.897572994 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.897722006 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.897881031 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.897898912 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.911504030 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.911662102 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.911741018 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.911794901 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.911823988 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.911859989 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.911874056 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.913810968 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.913881063 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.914081097 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.914233923 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.914263010 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.991919041 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.992075920 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.992136955 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.992182016 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.992182016 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.992204905 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.992227077 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.994216919 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.994252920 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.994313002 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.994419098 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.994436979 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.995064020 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.995215893 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.995271921 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.995296001 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.995309114 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.995322943 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.995326996 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.997196913 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.997272968 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:07.997361898 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.997473001 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:07.997508049 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.285298109 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.285849094 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.285943031 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.286279917 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.286294937 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.414767027 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.415066004 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.415374994 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.415374994 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.415374994 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.418186903 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.418220997 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.418363094 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.418509960 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.418519974 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.630973101 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.631412983 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.631453037 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.631834984 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.631841898 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.653466940 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.654021025 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.654042006 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.654416084 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.654419899 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.724205971 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.724644899 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.724667072 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.725044012 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.725049973 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.727117062 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.727404118 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.727441072 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.727804899 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.727813005 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.733550072 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.733614922 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.762846947 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.763101101 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.763178110 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.763251066 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.763266087 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.765986919 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.766048908 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.766185999 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.766350985 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.766371965 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.782464981 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.782608986 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.782665968 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.782824993 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.782824993 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.782870054 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.782897949 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.785413027 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.785434008 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.785672903 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.785927057 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.785943031 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.854037046 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.854115009 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.854173899 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.854250908 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.854260921 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.854271889 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.854278088 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.856297016 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.856323004 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.856379986 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.856479883 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.856492043 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.863444090 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.863673925 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.863815069 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.863879919 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.863879919 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.863910913 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.863936901 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.865593910 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.865616083 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:08.865670919 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.865797043 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:08.865808010 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.152442932 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.152905941 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.152920961 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.153314114 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.153321981 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.606281042 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.606447935 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.606518030 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.606647968 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.606657028 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.606668949 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.606673956 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.609291077 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.609323978 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.609386921 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.609575987 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.609590054 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.741914988 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.742295980 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.742311954 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.742708921 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.742713928 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.743175983 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.743469000 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.743484974 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.743808985 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.743815899 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.751235008 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.751565933 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.751580000 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.752059937 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.752064943 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.756002903 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.756330967 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.756345034 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.756655931 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.756660938 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.873203039 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.873343945 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.873409033 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.873456001 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.873466015 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.873473883 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.873477936 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.876004934 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.876014948 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.876079082 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.876244068 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.876255989 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.877367020 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.877908945 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.877963066 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.877998114 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.878019094 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.878031969 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.878038883 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.880034924 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.880060911 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.880227089 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.880354881 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.880364895 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.886967897 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.887104034 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.887161016 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.887187004 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.887192011 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.887202978 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.887207985 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.889089108 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.889173031 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.889256954 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.889367104 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.889399052 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.892504930 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.892693043 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.892771006 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.892771959 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.892812967 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.892828941 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.894567966 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.894577980 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:09.894639015 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.894726992 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:09.894737005 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.350450039 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.351114988 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.351136923 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.351381063 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.351386070 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.406534910 CEST	49831	443	192.168.2.4	142.250.185.228
Oct 25, 2024 10:56:10.406601906 CEST	443	49831	142.250.185.228	192.168.2.4
Oct 25, 2024 10:56:10.406694889 CEST	49831	443	192.168.2.4	142.250.185.228
Oct 25, 2024 10:56:10.406893015 CEST	49831	443	192.168.2.4	142.250.185.228
Oct 25, 2024 10:56:10.406928062 CEST	443	49831	142.250.185.228	192.168.2.4
Oct 25, 2024 10:56:10.479717970 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.480072021 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.480160952 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.480160952 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.480192900 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.480207920 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.482964039 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.483061075 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.483155012 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.483294964 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.483330011 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.604923964 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.605289936 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.605305910 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.605705976 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.605711937 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.614583969 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.614885092 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.614896059 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.615336895 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.615344048 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.638336897 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.638544083 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.638731003 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.638751984 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.638947010 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.638953924 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.639285088 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.639297962 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.639328957 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.639333010 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.733562946 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.733896971 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.733953953 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.736324072 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.736329079 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.736376047 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.736378908 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.741890907 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.741919041 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.741971970 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.742413044 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.742427111 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.744343042 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.744391918 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.744441986 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.744467020 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.744528055 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.744587898 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.744841099 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.744853973 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.744870901 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.744878054 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.749360085 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.749433041 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.749748945 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.750011921 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.750044107 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.771826982 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.772033930 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.772083998 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.772325993 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.772331953 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.772342920 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.772347927 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.772754908 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.772905111 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.772974968 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.773097038 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.773134947 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.773196936 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.773212910 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.778398991 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.778433084 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.778528929 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.780231953 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.780313969 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.780383110 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.780723095 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.780747890 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:10.780787945 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:10.780822992 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.225552082 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.226125002 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.226200104 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.227391005 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.227407932 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.255074978 CEST	443	49831	142.250.185.228	192.168.2.4
Oct 25, 2024 10:56:11.255635023 CEST	49831	443	192.168.2.4	142.250.185.228
Oct 25, 2024 10:56:11.255654097 CEST	443	49831	142.250.185.228	192.168.2.4
Oct 25, 2024 10:56:11.256115913 CEST	443	49831	142.250.185.228	192.168.2.4
Oct 25, 2024 10:56:11.257169008 CEST	49831	443	192.168.2.4	142.250.185.228
Oct 25, 2024 10:56:11.257251978 CEST	443	49831	142.250.185.228	192.168.2.4
Oct 25, 2024 10:56:11.312305927 CEST	49831	443	192.168.2.4	142.250.185.228
Oct 25, 2024 10:56:11.360943079 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.360972881 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.361042976 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.361047029 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.361221075 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.361690044 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.361723900 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.361764908 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.361779928 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.365668058 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.365698099 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.365844011 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.366084099 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.366096973 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.473606110 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.474373102 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.474405050 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.475038052 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.475055933 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.512315035 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.513391972 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.513406038 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.514628887 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.514633894 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.516858101 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.517330885 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.517358065 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.517995119 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.518007040 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.526779890 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.527472019 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.527509928 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.528065920 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.528076887 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.603719950 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.603773117 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.603832006 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.603842974 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.603883982 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.603895903 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.603961945 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.604082108 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.604088068 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.604119062 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.604123116 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.606332064 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.606404066 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.606477976 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.606621981 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.606657982 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.645168066 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.645221949 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.645272970 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.645435095 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.645438910 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.645510912 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.645514965 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.648490906 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.648502111 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.648592949 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.648709059 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.648734093 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.648747921 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.648848057 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.648905993 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.648952007 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.648952007 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.648976088 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.648998022 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.651783943 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.651793003 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.651874065 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.652010918 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.652023077 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.663939953 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.663963079 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.664016962 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.664031029 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.664130926 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.664248943 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.664283037 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.664311886 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.664331913 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.666119099 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.666153908 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:11.666218996 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.666384935 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:11.666413069 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.112926960 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.114732981 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.114747047 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.115561962 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.115566969 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.243659973 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.243848085 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.243918896 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.244230032 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.244236946 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.244438887 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.244442940 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.248330116 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.248357058 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.248907089 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.248907089 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.248929977 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.355133057 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.355962038 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.356039047 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.357074976 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.357089043 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.369122982 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.369616985 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.369645119 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.370170116 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.370177031 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.390767097 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.391117096 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.391133070 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.391834974 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.391839027 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.397768974 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.398479939 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.398509026 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.399162054 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.399173975 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.485704899 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.485852003 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.485976934 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.486257076 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.486293077 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.490818024 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.490870953 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.491024017 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.491241932 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.491272926 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.498332977 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.498445988 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.498488903 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.498660088 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.498666048 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.498673916 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.498677015 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.503417015 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.503428936 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.503647089 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.503936052 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.503950119 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.518497944 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.518645048 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.518695116 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.519026995 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.519033909 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.519042015 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.519045115 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.523946047 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.523996115 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.524089098 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.524437904 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.524471998 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.526400089 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.526532888 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.526596069 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.526751995 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.526771069 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.526798010 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.526809931 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.530775070 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.530781984 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:12.530951977 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.531199932 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:12.531209946 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.006673098 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.007219076 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.007237911 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.007669926 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.007673979 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.142122030 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.142287970 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.142391920 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.142591000 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.142605066 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.142617941 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.142622948 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.145814896 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.145879984 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.145963907 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.146105051 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.146125078 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.232714891 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.233099937 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.233170986 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.233531952 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.233546019 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.237669945 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.237998962 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.238020897 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.238471985 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.238476992 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.265726089 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.266174078 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.266180992 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.266608953 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.266613007 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.361133099 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.362747908 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.362904072 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.362986088 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.368834972 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.369020939 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.369064093 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.379187107 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.379245996 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.379574060 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.379589081 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.380383015 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.380433083 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.383621931 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.383630037 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.397903919 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.398093939 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.398145914 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.419027090 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.419068098 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.419178009 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.428276062 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.428276062 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.428282976 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.428291082 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.428466082 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.428487062 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.469197989 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.469245911 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.469301939 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.491910934 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.491928101 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.515223026 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.515295982 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.515364885 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.515396118 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.515427113 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.515564919 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.519640923 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.519654989 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.519706011 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.519879103 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.519903898 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.520194054 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.520207882 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.526542902 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.526570082 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.526639938 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.527017117 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.527028084 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.882090092 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.882684946 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.882719040 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:13.883461952 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:13.883479118 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.011579990 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.011662006 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.011759043 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.011790991 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.011848927 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.011914968 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.011996031 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.012025118 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.012051105 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.012067080 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.015141010 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.015224934 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.015398026 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.016285896 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.016324043 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.256289959 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.257021904 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.257040024 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.258101940 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.258110046 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.263922930 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.264601946 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.264612913 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.265558004 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.265563965 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.266354084 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.267055035 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.267069101 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.267621994 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.267627001 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.384942055 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.385234118 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.385391951 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.385435104 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.385447025 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.385461092 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.385468006 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.387798071 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.387823105 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.387980938 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.388132095 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.388138056 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.393224001 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.393421888 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.393527031 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.393531084 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.393599987 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.393655062 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.393655062 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.393670082 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.393680096 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.396358013 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.396442890 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.396542072 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.396701097 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.396738052 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.404211998 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.404371977 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.404479027 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.404666901 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.404666901 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.404676914 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.404684067 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.406358957 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.406374931 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.406429052 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.406651974 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.406661987 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.455277920 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.455610037 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.455621958 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.455991030 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.455996037 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.586215019 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.586272955 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.586500883 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.586530924 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.586541891 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.586551905 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.586556911 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.588975906 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.588999987 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.589061975 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.589189053 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.589205980 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.758193016 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.770556927 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.770613909 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:14.771356106 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:14.771369934 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.089807987 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.090640068 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.090712070 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.090765953 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.090766907 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.090800047 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.090822935 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.093837976 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.093879938 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.094115019 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.094361067 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.094389915 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.221812010 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.222203016 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.222228050 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.222639084 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.222644091 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.234518051 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.234832048 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.234848976 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.235330105 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.235352039 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.238498926 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.238853931 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.238872051 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.239212036 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.239217043 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.669070959 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.669225931 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.669392109 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.669392109 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.669420958 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.669435978 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.669733047 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.669848919 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.670116901 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.670299053 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.670299053 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.670315981 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.670320034 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.670839071 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.670875072 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.671149969 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.671658039 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.671658039 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.671677113 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.671685934 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.671884060 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.671956062 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.671993017 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.672039986 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.672055960 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.673218012 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.673240900 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.673389912 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.673696041 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.673702955 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.673711061 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.673763990 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.674274921 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.674423933 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.674455881 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.675637007 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.675664902 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.675846100 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.676053047 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.676074028 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.804266930 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.804759979 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.804856062 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.804856062 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.804889917 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.804899931 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.807010889 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.807033062 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.807234049 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.807234049 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.807270050 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.840241909 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.840661049 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.840742111 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:15.841099024 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:15.841113091 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.088293076 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.088366985 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.088521004 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.088567972 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.088788986 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.088788986 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.088969946 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.089004040 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.091244936 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.091285944 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.091440916 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.091552973 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.091563940 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.405601025 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.406604052 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.406604052 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.406631947 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.406650066 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.412657976 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.413284063 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.413285017 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.413347960 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.413395882 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.533333063 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.533521891 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.533726931 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.533726931 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.533878088 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.533895016 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.536118984 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.536159992 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.536580086 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.536580086 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.536614895 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.552484035 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.553018093 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.553105116 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.553201914 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.553201914 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.553244114 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.553276062 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.555183887 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.555228949 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.555351973 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.555473089 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.555505991 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.559825897 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.560566902 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.560566902 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.560580969 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.560602903 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.637228012 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.637876987 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.637876987 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.637890100 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.637907982 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.770275116 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.770495892 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.770629883 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.770629883 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.770699978 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.770724058 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.772942066 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.772969007 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.773117065 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.773199081 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.773209095 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.841649055 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.842089891 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.842113018 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.842538118 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.842545033 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.943425894 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.943451881 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.943495035 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.943531036 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.943599939 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.943762064 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.943762064 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.943804026 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.943831921 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.946341038 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.946424007 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.946768999 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.946837902 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.946856976 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.973659992 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.973814964 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.974003077 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.974003077 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.974145889 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.974162102 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.976305962 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.976325035 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:16.976470947 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.976547003 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:16.976560116 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.278814077 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.279633045 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.279661894 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.279814959 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.279820919 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.292619944 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.293493032 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.293493032 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.293556929 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.293612957 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.410495043 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.410657883 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.410880089 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.410880089 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.410907984 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.410918951 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.413243055 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.413291931 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.413458109 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.413686991 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.413702965 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.424765110 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.424839020 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.425137043 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.425137043 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.425137997 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.427206993 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.427227020 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.427362919 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.427416086 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.427423000 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.507249117 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.508116007 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.508116007 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.508127928 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.508143902 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.636554003 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.636609077 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.636651039 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.636745930 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.636890888 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.636908054 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.636941910 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.636949062 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.639353991 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.639425993 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.639573097 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.639672041 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.639689922 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.683693886 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.684534073 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.684534073 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.684570074 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.684609890 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.702922106 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.703341961 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.703365088 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.703742027 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.703751087 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.734225988 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.734275103 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.816992044 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.817279100 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.817445993 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.817445993 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.817604065 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.817625046 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.819804907 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.819823027 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.819955111 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.820018053 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.820025921 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.831490993 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.831617117 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.831707954 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.831728935 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.831728935 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.831741095 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.831753016 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.833777905 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.833796978 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:17.833969116 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.834089994 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:17.834104061 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.155919075 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.160438061 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.160468102 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.160748959 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.160757065 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.164378881 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.165288925 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.165333033 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.167943001 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.167958975 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.286195993 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.286221027 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.286267996 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.286303997 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.286457062 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.286669970 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.286669970 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.286690950 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.286696911 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.291712999 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.291754961 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.291937113 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.294960022 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.295021057 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.295063019 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.295099974 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.295195103 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.295195103 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.295252085 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.295280933 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.298438072 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.298471928 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.298722982 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.298722982 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.298760891 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.378973961 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.379682064 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.379699945 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.380229950 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.380240917 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.511883020 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.512022018 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.512103081 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.512322903 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.512322903 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.512347937 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.512368917 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.516014099 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.516098022 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.516186953 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.516505003 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.516541004 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.585035086 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.585562944 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.585594893 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.586421013 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.586430073 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.586838961 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.587249041 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.587280989 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.588066101 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.588073015 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.718573093 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.718719006 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.718792915 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.723563910 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.723640919 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.723691940 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.747356892 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.747373104 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.747407913 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.747414112 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.777910948 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.777930021 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.785039902 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.785059929 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.785120964 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.790086031 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.790103912 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.791403055 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.791513920 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:18.791589022 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.791877985 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:18.791914940 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.040034056 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.040621042 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.040682077 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.040921926 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.040936947 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.078567028 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.079138994 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.079164982 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.079642057 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.079649925 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.173635006 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.173675060 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.173726082 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.173779964 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.173780918 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.174050093 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.174050093 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.174082994 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.174104929 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.176971912 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.176992893 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.177068949 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.177206039 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.177222013 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.211416960 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.211568117 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.211631060 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.212573051 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.212584972 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.212599993 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.212608099 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.240508080 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.246135950 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.246217966 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.247231007 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.247246981 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.260651112 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.260755062 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.260829926 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.261116982 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.261149883 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.371632099 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.371709108 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.371809006 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.371896982 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.371896982 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.372090101 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.372090101 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.372134924 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.372164011 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.376817942 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.376904011 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.376992941 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.377198935 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.377228975 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.512979031 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.513406038 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.513434887 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.514642954 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.514651060 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.535248041 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.536150932 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.536204100 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.537496090 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.537513018 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.642594099 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.642659903 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.642754078 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.643174887 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.643184900 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.643194914 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.643198967 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.649485111 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.649528980 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.649635077 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.649852037 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.649867058 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.667165995 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.667258978 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.667330980 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.667375088 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.667423964 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.667498112 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.667596102 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.667629957 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.667661905 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.667676926 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.669817924 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.669902086 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.670053959 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.670150995 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.670177937 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.928852081 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.929575920 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.929588079 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:19.930428982 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:19.930433989 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.035168886 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.036117077 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.036180019 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.037271976 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.037287951 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.062714100 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.062783003 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.062844992 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.063158989 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.063165903 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.063175917 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.063179970 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.068001032 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.068023920 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.068098068 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.068525076 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.068536997 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.115633965 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.116261959 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.116292953 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.117141962 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.117168903 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.177158117 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.179203987 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.179274082 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.179331064 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.179366112 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.179425001 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.179471016 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.179501057 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.179501057 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.179523945 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.179543972 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.181885004 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.181899071 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.181986094 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.182106018 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.182121992 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.249933958 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.250072002 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.250161886 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.250286102 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.250286102 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.250312090 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.250334024 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.253300905 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.253349066 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.253424883 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.253635883 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.253653049 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.387348890 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.387840986 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.387854099 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.388423920 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.388427973 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.408204079 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.408580065 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.408591986 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.409117937 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.409123898 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.517431021 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.517658949 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.517708063 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.517757893 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.517883062 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.517896891 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.523047924 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.523065090 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.523156881 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.523420095 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.523437023 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.539563894 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.539717913 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.539794922 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.540163994 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.540179014 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.540208101 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.540221930 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.544945002 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.544980049 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.545226097 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.545517921 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.545537949 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.825467110 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.826142073 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.826155901 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.827258110 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.827263117 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.918524027 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.919127941 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.919142962 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.919646978 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.919652939 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.957056046 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.957134008 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.957184076 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.957633972 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.957648993 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.957659960 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.957664967 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.962311983 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.962353945 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.962429047 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.962717056 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.962735891 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.993227959 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.993895054 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.993910074 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:20.994648933 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:20.994653940 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.049603939 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.049756050 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.049876928 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.060089111 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.060089111 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.060110092 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.060120106 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.085939884 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.086023092 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.086096048 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.086586952 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.086622953 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.124337912 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.124408007 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.124463081 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.124479055 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.124510050 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.124556065 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.129024982 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.129036903 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.129053116 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.129059076 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.183746099 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.183784962 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.183866978 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.184072971 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.184092045 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.247936964 CEST	443	49831	142.250.185.228	192.168.2.4
Oct 25, 2024 10:56:21.248084068 CEST	443	49831	142.250.185.228	192.168.2.4
Oct 25, 2024 10:56:21.248177052 CEST	49831	443	192.168.2.4	142.250.185.228
Oct 25, 2024 10:56:21.257431984 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.258761883 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.258784056 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.259911060 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.259917021 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.289197922 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.289691925 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.289704084 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.290663958 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.290671110 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.387522936 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.387928963 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.387998104 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.388194084 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.388202906 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.388216019 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.388221025 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.392966032 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.393040895 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.393126965 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.393332005 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.393383980 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.421036959 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.421097040 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.421191931 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.421241999 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.421416044 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.421428919 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.425904989 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.425935030 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.426062107 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.426523924 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.426536083 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.707220078 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.707648993 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.707675934 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.708223104 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.708230972 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.826287031 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.826816082 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.826896906 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.827404022 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.827420950 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.838165998 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.838380098 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.838440895 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.838466883 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.838479996 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.838494062 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.838500977 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.841080904 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.841159105 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.841236115 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.841372967 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.841406107 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.933656931 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.934082985 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.934092999 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.934652090 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.934658051 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.955034018 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.955157995 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.955359936 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.955439091 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.955507040 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.955554008 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.955571890 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.961117029 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.961150885 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:21.961560011 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.962377071 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:21.962390900 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.062469006 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.062696934 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.062791109 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.062848091 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.062868118 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.062881947 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.062889099 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.066060066 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.066102028 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.066179991 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.066390991 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.066418886 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.129827976 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.130264997 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.130381107 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.130882025 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.130935907 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.172020912 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.172369003 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.172388077 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.172884941 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.172888994 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.269701958 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.269903898 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.269979954 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.270200968 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.270201921 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.270201921 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.272716999 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.272803068 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.272883892 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.273243904 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.273325920 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.304852009 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.305003881 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.305072069 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.305145979 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.305160999 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.305171967 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.305176020 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.307761908 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.307792902 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.307857037 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.307991982 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.308005095 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.574745893 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.575125933 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.575170040 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.575685978 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.575699091 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.577846050 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.577908993 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.695238113 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.695677996 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.695699930 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.696326017 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.696352005 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.704323053 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.704344988 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.704384089 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.704416990 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.704464912 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.704629898 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.704629898 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.704662085 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.704684973 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.707551003 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.707637072 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.707725048 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.707859993 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.707899094 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.814114094 CEST	49831	443	192.168.2.4	142.250.185.228
Oct 25, 2024 10:56:22.814133883 CEST	443	49831	142.250.185.228	192.168.2.4
Oct 25, 2024 10:56:22.823999882 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.824179888 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.824245930 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.824286938 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.824301004 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.824311972 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.824316978 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.824795008 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.825105906 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.825124979 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.825727940 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.825754881 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.826746941 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.826781988 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.826838970 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.827016115 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.827033997 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.960773945 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.960920095 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.960993052 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.961055040 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.961076021 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.961106062 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.961121082 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.963558912 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.963601112 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:22.963812113 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.963927031 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:22.963943958 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.008752108 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.009282112 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.009371042 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.009771109 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.009788036 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.047792912 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.048249006 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.048263073 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.048791885 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.048795938 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.139292002 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.139377117 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.139456987 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.139636040 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.139683008 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.139714003 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.139730930 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.142584085 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.142606974 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.142740011 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.142888069 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.142898083 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.179801941 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.179970026 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.180025101 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.180126905 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.180141926 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.180150986 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.180155993 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.182588100 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.182631016 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.182816982 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.182816982 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.182856083 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.462096930 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.463257074 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.463257074 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.463337898 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.463382959 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.595623970 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.595688105 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.595923901 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.595923901 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.595923901 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.598443985 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.598469973 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.598536015 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.598576069 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.598716021 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.598736048 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.599359035 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.599359989 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.599380970 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.599390030 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.719465017 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.720534086 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.720534086 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.720563889 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.720585108 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.730627060 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.730778933 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.730937004 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.730937004 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.731084108 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.731097937 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.733787060 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.733805895 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.733958006 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.734018087 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.734024048 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.862943888 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.863121986 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.863240957 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.863240957 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.863303900 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.863323927 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.866163015 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.866226912 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.866451025 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.866451979 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.866522074 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.877989054 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.878989935 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.878989935 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.879000902 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.879015923 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.905961037 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.905982971 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.943372965 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.943928003 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.943945885 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:23.944092035 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:23.944097042 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.012407064 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.012439013 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.012485027 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.012602091 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.012793064 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.012793064 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.012806892 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.012815952 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.015908957 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.015942097 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.016165018 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.016263008 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.016274929 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.072735071 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.072911978 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.073018074 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.073018074 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.073050022 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.073059082 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.075489998 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.075532913 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.075725079 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.075725079 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.075782061 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.565824986 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.566706896 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.566773891 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.566782951 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.566952944 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.566967010 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.567531109 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.567531109 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.567550898 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.567559958 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.606519938 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.607369900 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.607369900 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.607403040 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.607439041 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.701044083 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.701318026 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.701405048 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.701405048 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.701580048 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.701592922 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.704171896 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.704219103 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.704322100 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.704322100 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.704348087 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.704508066 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.704508066 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.704529047 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.704549074 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.704549074 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.704555035 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.704562902 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.706823111 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.706866026 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.707052946 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.707052946 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.707092047 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.738110065 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.738157988 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.738301039 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.738346100 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.738475084 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.738475084 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.738701105 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.738732100 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.741254091 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.741286039 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.741539955 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.741539955 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.741568089 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.754211903 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.755145073 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.755145073 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.755161047 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.755168915 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.815200090 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.816808939 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.816829920 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.817374945 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.817384005 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.883507013 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.883538961 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.883584976 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.883608103 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.883745909 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.883759975 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.883774042 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.883774042 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.883780956 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.883785963 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.886049986 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.886087894 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.886203051 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.886282921 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.886302948 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.945190907 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.945274115 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.945383072 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.945429087 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.945481062 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.945481062 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.945557117 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.945573092 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.947422981 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.947506905 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:24.947957039 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.947957039 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:24.948102951 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.464484930 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.465411901 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.465441942 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.465699911 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.465707064 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.465801954 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.466223955 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.466240883 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.466689110 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.466695070 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.478620052 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.479079008 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.479089022 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.479366064 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.479377031 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.597910881 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.597937107 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.597980022 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.598010063 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.598114014 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.598217964 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.598218918 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.598232985 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.598243952 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.600862026 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.600897074 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.601197004 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.601197004 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.601231098 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.607474089 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.607688904 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.607777119 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.607777119 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.607841015 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.607865095 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.610222101 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.610287905 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.610379934 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.610523939 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.610553980 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.613727093 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.614298105 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.614306927 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.614650011 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.614655972 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.629292011 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.629429102 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.629605055 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.629638910 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.629638910 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.629646063 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.629652977 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.631392956 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.631407022 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.631496906 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.631613016 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.631629944 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.699729919 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.702897072 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.702929974 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.703366995 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.703383923 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.742276907 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.742301941 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.742362022 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.742393017 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.742466927 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.747891903 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.747891903 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.747908115 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.747919083 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.751718998 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.751765013 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.751934052 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.752057076 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.752073050 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.829917908 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.829960108 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.830060959 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.830080032 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.830142021 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.830400944 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.830425024 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.830456018 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.830471039 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.833201885 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.833261013 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:25.833421946 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.833543062 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:25.833559036 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.349292994 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.349798918 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.349817038 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.350261927 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.350270033 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.356837034 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.357182980 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.357240915 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.357536077 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.357548952 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.358217001 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.358622074 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.358638048 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.359009981 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.359016895 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.482480049 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.482531071 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.482575893 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.482620001 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.482637882 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.482965946 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.482969999 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.482984066 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.482997894 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.483006001 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.483012915 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.483398914 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.483406067 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.485646963 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.485810041 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.485979080 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.486001968 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.486007929 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.486032009 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.486037016 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.486349106 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.486381054 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.486459970 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.486875057 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.486890078 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.487154961 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.487329960 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.487473965 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.487473965 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.487540007 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.487566948 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.488835096 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.488917112 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.489018917 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.489196062 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.489229918 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.489394903 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.489422083 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.489473104 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.489588976 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.489599943 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.610018015 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.610429049 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.610487938 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.610809088 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.610824108 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.613681078 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.613833904 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.613913059 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.613993883 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.614011049 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.614027977 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.614036083 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.617264032 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.617343903 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.617423058 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.617544889 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.617585897 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.747587919 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.747664928 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.747769117 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.747812033 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.747869968 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.747909069 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.747951031 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.747980118 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.747996092 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.750056982 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.750092983 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:26.750164986 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.750349045 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:26.750363111 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.213120937 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.213571072 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.213608027 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.214015007 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.214027882 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.226779938 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.227107048 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.227144003 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.227519989 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.227530956 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.267000914 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.267332077 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.267343998 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.267684937 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.267688990 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.342322111 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.342343092 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.342377901 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.342427015 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.342576981 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.342607975 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.342637062 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.342654943 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.345118999 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.345155954 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.345231056 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.345395088 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.345422983 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.357762098 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.357933998 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.357995033 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.358139992 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.358159065 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.358165979 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.358174086 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.360295057 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.360330105 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.360426903 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.360574007 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.360594034 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.369476080 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.369806051 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.369827032 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.370238066 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.370249987 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.404659986 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.405149937 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.405245066 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.405284882 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.405297995 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.405323029 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.405328035 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.407279968 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.407322884 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.407453060 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.407629967 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.407649040 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.476695061 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.477313042 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.477330923 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.477566957 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.477574110 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.502055883 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.502090931 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.502136946 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.502170086 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.502294064 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.502490044 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.502511024 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.502557039 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.502573013 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.504637957 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.504661083 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.504755020 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.504916906 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.504929066 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.605864048 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.606020927 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.606292963 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.606292963 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.606429100 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.606442928 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.609035015 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.609061003 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 25, 2024 10:56:27.609146118 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.609299898 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 25, 2024 10:56:27.609316111 CEST	443	49927	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 25, 2024 10:55:05.940143108 CEST	53	59893	1.1.1.1	192.168.2.4
Oct 25, 2024 10:55:06.224622965 CEST	53	54383	1.1.1.1	192.168.2.4
Oct 25, 2024 10:55:07.254951954 CEST	65148	53	192.168.2.4	1.1.1.1
Oct 25, 2024 10:55:07.255305052 CEST	56079	53	192.168.2.4	1.1.1.1
Oct 25, 2024 10:55:08.275142908 CEST	50128	53	192.168.2.4	1.1.1.1
Oct 25, 2024 10:55:08.275275946 CEST	53943	53	192.168.2.4	1.1.1.1
Oct 25, 2024 10:55:08.482665062 CEST	53	65148	1.1.1.1	192.168.2.4
Oct 25, 2024 10:55:08.482708931 CEST	53	56079	1.1.1.1	192.168.2.4
Oct 25, 2024 10:55:08.486128092 CEST	53	50128	1.1.1.1	192.168.2.4
Oct 25, 2024 10:55:08.486177921 CEST	53	53943	1.1.1.1	192.168.2.4
Oct 25, 2024 10:55:08.486709118 CEST	53	63676	1.1.1.1	192.168.2.4
Oct 25, 2024 10:55:09.329332113 CEST	50714	53	192.168.2.4	1.1.1.1
Oct 25, 2024 10:55:09.329617977 CEST	61031	53	192.168.2.4	1.1.1.1
Oct 25, 2024 10:55:09.343971968 CEST	53	61031	1.1.1.1	192.168.2.4
Oct 25, 2024 10:55:09.356935978 CEST	53	50714	1.1.1.1	192.168.2.4
Oct 25, 2024 10:55:10.343571901 CEST	62863	53	192.168.2.4	1.1.1.1
Oct 25, 2024 10:55:10.343688011 CEST	53119	53	192.168.2.4	1.1.1.1
Oct 25, 2024 10:55:10.351075888 CEST	53	62863	1.1.1.1	192.168.2.4
Oct 25, 2024 10:55:10.351092100 CEST	53	53119	1.1.1.1	192.168.2.4
Oct 25, 2024 10:55:18.718076944 CEST	138	138	192.168.2.4	192.168.2.255
Oct 25, 2024 10:55:25.680175066 CEST	53	56903	1.1.1.1	192.168.2.4
Oct 25, 2024 10:55:45.529522896 CEST	53	64396	1.1.1.1	192.168.2.4
Oct 25, 2024 10:56:05.760498047 CEST	53	60426	1.1.1.1	192.168.2.4
Oct 25, 2024 10:56:09.043288946 CEST	53	61632	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 25, 2024 10:55:08.486262083 CEST	192.168.2.4	1.1.1.1	c230	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 25, 2024 10:55:07.254951954 CEST	192.168.2.4	1.1.1.1	0xf860	Standard query (0)	s.ksrndkehqnwntyxlhgto.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:55:07.255305052 CEST	192.168.2.4	1.1.1.1	0x7b72	Standard query (0)	s.ksrndkehqnwntyxlhgto.com	65	IN (0x0001)	false
Oct 25, 2024 10:55:08.275142908 CEST	192.168.2.4	1.1.1.1	0x5057	Standard query (0)	s.ksrndkehqnwntyxlhgto.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:55:08.275275946 CEST	192.168.2.4	1.1.1.1	0x3c1b	Standard query (0)	s.ksrndkehqnwntyxlhgto.com	65	IN (0x0001)	false
Oct 25, 2024 10:55:09.329332113 CEST	192.168.2.4	1.1.1.1	0xbd2e	Standard query (0)	s.ksrndkehqnwntyxlhgto.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:55:09.329617977 CEST	192.168.2.4	1.1.1.1	0xee84	Standard query (0)	s.ksrndkehqnwntyxlhgto.com	65	IN (0x0001)	false
Oct 25, 2024 10:55:10.343571901 CEST	192.168.2.4	1.1.1.1	0x9047	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:55:10.343688011 CEST	192.168.2.4	1.1.1.1	0xf614	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 25, 2024 10:55:08.482665062 CEST	1.1.1.1	192.168.2.4	0xf860	No error (0)	s.ksrndkehqnwntyxlhgto.com		18.245.60.3	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:55:08.482665062 CEST	1.1.1.1	192.168.2.4	0xf860	No error (0)	s.ksrndkehqnwntyxlhgto.com		18.245.60.9	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:55:08.482665062 CEST	1.1.1.1	192.168.2.4	0xf860	No error (0)	s.ksrndkehqnwntyxlhgto.com		18.245.60.77	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:55:08.482665062 CEST	1.1.1.1	192.168.2.4	0xf860	No error (0)	s.ksrndkehqnwntyxlhgto.com		18.245.60.90	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:55:08.486128092 CEST	1.1.1.1	192.168.2.4	0x5057	No error (0)	s.ksrndkehqnwntyxlhgto.com		18.245.60.3	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:55:08.486128092 CEST	1.1.1.1	192.168.2.4	0x5057	No error (0)	s.ksrndkehqnwntyxlhgto.com		18.245.60.90	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:55:08.486128092 CEST	1.1.1.1	192.168.2.4	0x5057	No error (0)	s.ksrndkehqnwntyxlhgto.com		18.245.60.77	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:55:08.486128092 CEST	1.1.1.1	192.168.2.4	0x5057	No error (0)	s.ksrndkehqnwntyxlhgto.com		18.245.60.9	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:55:09.356935978 CEST	1.1.1.1	192.168.2.4	0xbd2e	No error (0)	s.ksrndkehqnwntyxlhgto.com		18.245.60.90	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:55:09.356935978 CEST	1.1.1.1	192.168.2.4	0xbd2e	No error (0)	s.ksrndkehqnwntyxlhgto.com		18.245.60.9	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:55:09.356935978 CEST	1.1.1.1	192.168.2.4	0xbd2e	No error (0)	s.ksrndkehqnwntyxlhgto.com		18.245.60.77	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:55:09.356935978 CEST	1.1.1.1	192.168.2.4	0xbd2e	No error (0)	s.ksrndkehqnwntyxlhgto.com		18.245.60.3	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:55:10.351075888 CEST	1.1.1.1	192.168.2.4	0x9047	No error (0)	www.google.com		142.250.185.228	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:55:10.351092100 CEST	1.1.1.1	192.168.2.4	0xf614	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 25, 2024 10:55:23.236002922 CEST	1.1.1.1	192.168.2.4	0x9438	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:55:23.236002922 CEST	1.1.1.1	192.168.2.4	0x9438	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:55:41.657346964 CEST	1.1.1.1	192.168.2.4	0xebcd	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:55:41.657346964 CEST	1.1.1.1	192.168.2.4	0xebcd	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:55:54.730896950 CEST	1.1.1.1	192.168.2.4	0x347	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:55:54.730896950 CEST	1.1.1.1	192.168.2.4	0x347	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:56:19.118016005 CEST	1.1.1.1	192.168.2.4	0xdd3e	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:56:19.118016005 CEST	1.1.1.1	192.168.2.4	0xdd3e	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:56:19.118016005 CEST	1.1.1.1	192.168.2.4	0xdd3e	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

s.ksrndkehqnwntyxlhgto.com

https:

fs.microsoft.com

slscr.update.microsoft.com

otelrules.azureedge.net

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	18.245.60.3	80	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 10:55:08.489202023 CEST	441	OUT	GET / HTTP/1.1 Host: s.ksrndkehqnwntyxlhgto.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 10:55:09.326101065 CEST	576	IN	HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 25 Oct 2024 08:55:09 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Location: https://s.ksrndkehqnwntyxlhgto.com/ X-Cache: Redirect from cloudfront Via: 1.1 f192553c835240a9b5df520fb7ffd876.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P5 X-Amz-Cf-Id: uTKnvOwoX2bzWGrYKLHg-mYlDXucOBSQG4m5TuUqvCfRbzkV6N3emw== Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>CloudFront</center></body></html>
Oct 25, 2024 10:55:54.327258110 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49739	18.245.60.90	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:55:10 UTC	669	OUT	GET / HTTP/1.1 Host: s.ksrndkehqnwntyxlhgto.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:55:10 UTC	504	IN	HTTP/1.1 200 OK Content-Type: text/plain Content-Length: 20 Connection: close Last-Modified: Wed, 13 Jun 2018 16:12:20 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 25 Oct 2024 05:32:15 GMT ETag: "dc5bcbf7f9372ccc9aedb581fe88edfe" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 5b17764336ffdab7d2a3e7707394867a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P5 X-Amz-Cf-Id: ygZ6FYh5EhSRJIiclCzkztHaiME91fzGWKAHKlrWkEWSgGHyY5fvDw== Age: 23909
2024-10-25 08:55:10 UTC	20	IN	Data Raw: 4e 6f 74 68 69 6e 67 20 74 6f 20 73 65 65 20 68 65 72 65 2e Data Ascii: Nothing to see here.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49741	18.245.60.90	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:55:11 UTC	608	OUT	GET /favicon.ico HTTP/1.1 Host: s.ksrndkehqnwntyxlhgto.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s.ksrndkehqnwntyxlhgto.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:55:12 UTC	357	IN	HTTP/1.1 403 Forbidden Content-Type: application/xml Transfer-Encoding: chunked Connection: close Date: Fri, 25 Oct 2024 08:55:11 GMT Server: AmazonS3 X-Cache: Error from cloudfront Via: 1.1 bc841916063a49c638b48e73f77a28e8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P5 X-Amz-Cf-Id: NfyMtm4RqVkb3VQ_RpT0ILMtMBretTYtxiXmSasOZpND33rEb1n7sA==
2024-10-25 08:55:12 UTC	282	IN	Data Raw: 31 31 33 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 41 63 63 65 73 73 44 65 6e 69 65 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 41 63 63 65 73 73 20 44 65 6e 69 65 64 3c 2f 4d 65 73 73 61 67 65 3e 3c 52 65 71 75 65 73 74 49 64 3e 39 32 54 41 54 37 57 39 4d 48 4e 39 45 35 4e 42 3c 2f 52 65 71 75 65 73 74 49 64 3e 3c 48 6f 73 74 49 64 3e 46 2b 38 39 58 63 79 38 47 75 36 36 75 4e 52 6e 6f 55 65 66 4d 65 35 59 56 54 48 72 44 4b 67 73 5a 53 70 74 2f 64 42 36 32 41 4b 71 2f 63 32 37 44 4a 76 6e 76 44 2b 45 75 30 6a 77 6f 58 31 4d 4b 4c 4b 65 76 52 48 64 6b 68 58 47 68 35 4a 6e 2b 7a 45 68 68 6f 4a 66 4e 70 43 61 31 4e 49 2b 79 67 58 6a Data Ascii: 113<?xml version="1.0" encoding="UTF-8"?><Error><Code>AccessDenied</Code><Message>Access Denied</Message><RequestId>92TAT7W9MHN9E5NB</RequestId><HostId>F+89Xcy8Gu66uNRnoUefMe5YVTHrDKgsZSpt/dB62AKq/c27DJvnvD+Eu0jwoX1MKLKevRHdkhXGh5Jn+zEhhoJfNpCa1NI+ygXj
2024-10-25 08:55:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49742	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:55:11 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-25 08:55:12 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=200990 Date: Fri, 25 Oct 2024 08:55:12 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49743	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:55:13 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-25 08:55:14 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=200989 Date: Fri, 25 Oct 2024 08:55:13 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-25 08:55:14 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49744	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:55:21 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=pBxyZRaeV9n4ZSn&MD=No15XGcb HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-25 08:55:22 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 28905f54-314c-416b-86d5-0aff2ec78833 MS-RequestId: 5bab284e-8ccc-42f4-9328-e71ba2a9ae4f MS-CV: lZh03Bq0i0KYVhzM.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 25 Oct 2024 08:55:21 GMT Connection: close Content-Length: 24490
2024-10-25 08:55:22 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-25 08:55:22 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.4	49750	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:55:55 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:55:55 UTC	540	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:55:55 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 23 Oct 2024 06:30:03 GMT ETag: "0x8DCF32C20D7262E" x-ms-request-id: 39f98116-901e-0015-0fb5-25b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085555Z-16849878b78fmrkt2ukpvh9wh400000008x0000000008u2s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:55:55 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-25 08:55:55 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-25 08:55:55 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-25 08:55:55 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-25 08:55:55 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-25 08:55:55 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-25 08:55:55 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-25 08:55:55 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-25 08:55:55 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-25 08:55:55 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:55:56 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:55:56 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:55:56 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: cddcf92d-501e-008f-6a41-269054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085556Z-17c5cb586f6f69jxsre6kx2wmc00000002p0000000005193 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:55:56 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:55:56 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:55:56 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:55:56 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 331d1c77-401e-0029-354e-229b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085556Z-16849878b78k46f8kzwxznephs00000008t000000000egg1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:55:56 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:55:56 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:55:56 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:55:56 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 1a9c8bfd-301e-0000-1fee-25eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085556Z-15b8d89586fnsf5zd126eyaetw00000001h0000000003s9x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:55:56 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:55:56 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:55:56 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:55:56 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 52fc638d-b01e-0070-36c5-201cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085556Z-16849878b78bcpfn2qf7sm6hsn00000001y0000000005psm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:55:56 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:55:56 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:55:56 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:55:56 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 626c88a9-b01e-003d-54f3-24d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085556Z-15b8d89586flzzks5bs37v2b9000000004gg00000000644z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:55:56 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:55:58 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:55:58 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:55:58 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 4755be7f-e01e-0052-062b-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085558Z-16849878b78c5zx4gw8tcga1b400000008s000000000fcee x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:55:58 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:55:58 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:55:58 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:55:58 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: e84b733d-701e-005c-1bb8-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085558Z-16849878b787wpl5wqkt5731b400000000yg00000000ffpu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:55:58 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:55:58 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:55:58 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:55:58 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 734838af-101e-0065-4be5-214088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085558Z-16849878b78j5kdg3dndgqw0vg00000001yg00000000bp4b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:55:58 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:55:58 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:55:58 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:55:58 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: fef44d2e-901e-007b-639e-26ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085558Z-16849878b78qf2gleqhwczd21s00000000dg000000000xux x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:55:58 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:55:58 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:55:58 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:55:58 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e5fe76b8-601e-0050-2e06-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085558Z-17c5cb586f6g6g2sbe6edp75y400000002bg000000001qe8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:55:58 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:55:58 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:55:59 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:55:58 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: c8022c20-501e-00a3-08ae-26c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085558Z-16849878b78z5q7jpbgf6e9mcw00000008zg00000000emf5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:55:59 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:55:58 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:55:59 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:55:58 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085558Z-16849878b787wpl5wqkt5731b4000000015g0000000000cc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:55:59 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:55:58 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:55:59 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:55:59 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0fe0dd21-c01e-0066-771c-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085559Z-16849878b785jrf8dn0d2rczaw00000001fg000000005hm9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:55:59 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:55:59 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:55:59 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:55:59 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: f697d535-f01e-0099-085a-269171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085559Z-17c5cb586f6w4mfs5xcmnrny6n00000001tg0000000058be x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:55:59 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:55:59 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:55:59 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:55:59 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 7de7ed35-901e-005b-7c14-222005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085559Z-16849878b78bcpfn2qf7sm6hsn00000001y0000000005pwg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:55:59 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:55:59 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:55:59 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:55:59 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 1ff5e4cc-601e-0001-30ce-25faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085559Z-15b8d89586fsx9lfqmgrbzpgmg0000000g000000000043v4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:55:59 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:55:59 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:55:59 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:55:59 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: f94f539d-b01e-001e-773a-260214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085559Z-15b8d89586fcvr6p5956n5d0rc0000000610000000009cv3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:55:59 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:55:59 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:55:59 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:55:59 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 94fafadb-001e-0049-3f27-265bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085559Z-r197bdfb6b42rt68rzg9338g1g00000001f00000000041f4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:55:59 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:55:59 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:00 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:00 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 389dace0-b01e-003d-533d-26d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085559Z-17c5cb586f6w4mfs5xcmnrny6n00000001u0000000004a8p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:00 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49770	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:00 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=pBxyZRaeV9n4ZSn&MD=No15XGcb HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-25 08:56:00 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: e3448a9e-7559-45c6-9378-b97cac18cb9e MS-RequestId: 92e05665-1d58-4365-b461-31a5fb48cc40 MS-CV: X4wZIy+XCkKuV2Cl.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 25 Oct 2024 08:56:00 GMT Connection: close Content-Length: 30005
2024-10-25 08:56:00 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-25 08:56:00 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:00 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:00 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:00 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 78a5d0bc-501e-005b-6da6-26d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085600Z-16849878b78j7llf5vkyvvcehs00000001f0000000001wr1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:00 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:00 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:00 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:00 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: b26f0bb8-d01e-00ad-3518-26e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085600Z-16849878b785g992cz2s9gk35c00000008x000000000ekye x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:00 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:00 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:00 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:00 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 630b92e5-101e-00a2-203d-269f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085600Z-r197bdfb6b4bq7nf8mnywhn9e000000001cg000000003p8q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:00 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:00 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:00 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:00 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: bbff353d-b01e-005c-270e-264c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085600Z-16849878b786vsxz21496wc2qn000000091000000000a8yd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:56:00 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:00 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:00 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:00 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 00f7314e-e01e-0052-48ac-21d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085600Z-16849878b78j7llf5vkyvvcehs00000001cg000000007u9e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:00 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:01 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:01 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:01 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 4af8c3a5-e01e-0033-1562-264695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085601Z-16849878b786fl7gm2qg4r5y7000000000p00000000023w0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:56:01 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:01 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:01 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 6ff76e76-001e-002b-21c5-2099f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085601Z-16849878b78s2lqfdex4tmpp78000000092g000000002kqt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:01 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:01 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:01 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: c37df3a3-d01e-005a-6e58-267fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085601Z-17c5cb586f67hhlz1ecw6yxtp000000002s0000000000fcg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:01 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:01 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:01 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:01 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 3cf1b782-701e-0001-32e5-21b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085601Z-16849878b78hz7zj8u0h2zng14000000095g000000000mu2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:01 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:01 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:02 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:01 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 2760be74-301e-0096-200b-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085601Z-16849878b785g992cz2s9gk35c000000091g000000004mnv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:02 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:02 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:02 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:02 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 999b7e79-701e-001e-6bf4-24f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085602Z-r197bdfb6b4kq4j5t834fh90qn0000000c90000000007mh3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:02 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:02 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:02 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:02 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: e79f0600-d01e-00ad-4ef2-24e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085602Z-15b8d89586f989rkfw99rwd68g00000001k0000000003vh1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:02 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:02 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:02 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:02 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 46af3d48-701e-0032-6627-21a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085602Z-16849878b78q4pnrt955f8nkx800000008x00000000051ue x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:02 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:02 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:02 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:02 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 1f9c3bb8-d01e-0014-220b-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085602Z-16849878b78fssff8btnns3b1400000000n000000000590n x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:02 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:02 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:02 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:02 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 27632888-301e-0096-61d8-21e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085602Z-16849878b78rjhv97f3nhawr7s00000008xg000000008a7u x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:02 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:03 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:03 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:03 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 21f78716-701e-005c-7b46-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085603Z-17c5cb586f6hhlf5mrwgq3erx800000001dg000000001hmx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:03 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:03 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:03 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:03 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 42f5c72c-c01e-00a1-6643-267e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085603Z-16849878b78k46f8kzwxznephs00000008ug00000000amnz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:03 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:03 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:03 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:03 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 2897d81f-501e-005b-6528-26d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085603Z-r197bdfb6b49q4951yb663v3ds000000017000000000bcxp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:03 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:03 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:03 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:03 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: efc778c0-f01e-0052-4de5-219224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085603Z-16849878b78jfqwd1dsrhqg3aw00000008y000000000hfnr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:03 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:03 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:03 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:03 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 07f9ef03-d01e-0014-614d-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085603Z-16849878b785dznd7xpawq9gcn00000001rg0000000048ft x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:03 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:04 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:04 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:04 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 9658a421-401e-008c-7ff3-2486c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085604Z-15b8d89586ffsjj9qb0gmb1stn00000004dg00000000696a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:04 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:04 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:04 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:04 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: de733a63-101e-00a2-1415-269f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085604Z-17c5cb586f62blg5ss55p9d6fn00000000ug000000004t8g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:04 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:04 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:04 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:04 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 168e2c35-b01e-00ab-10df-25dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085604Z-16849878b78625wls3r8psr7u000000000e0000000006fpv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:56:04 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:04 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:04 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:04 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 43d08777-c01e-0014-2856-26a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085604Z-17c5cb586f6gkqkwd0x1ge8t0400000000g0000000004bnw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:56:04 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:04 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:04 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:04 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: d4d27aa7-601e-0002-1812-22a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085604Z-16849878b78hz7zj8u0h2zng140000000910000000009afn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:04 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:05 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:05 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:05 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 71d2c1fc-001e-00a2-01de-21d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085605Z-16849878b78hz7zj8u0h2zng1400000008y000000000fdba x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:05 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:05 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:05 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:05 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 95c67357-201e-0051-60f5-247340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085605Z-15b8d89586fwzdd8urmg0p1ebs0000000agg000000009n17 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:05 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:05 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:05 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:05 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 24724c44-d01e-002b-6428-2625fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085605Z-15b8d89586fvpb597drk06r8fc00000001c0000000003zdf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:05 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:05 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:05 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:05 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 6be8f11f-201e-003c-5028-2630f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085605Z-r197bdfb6b4tq6ldv3s2dcykm800000002u000000000a2se x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:05 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:05 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:05 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:05 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 94ed83ec-801e-0083-4bf2-24f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085605Z-15b8d89586fwzdd8urmg0p1ebs0000000agg000000009n1k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:05 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:06 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:06 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:06 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: e692d532-001e-00a2-3ae7-20d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085606Z-16849878b785jrf8dn0d2rczaw00000001fg000000005hv8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:06 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:06 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:06 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:06 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 4c87ede1-d01e-0065-6b9c-21b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085606Z-16849878b78625wls3r8psr7u000000000p0000000002bq0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:06 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:06 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:06 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:06 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 26e7cda7-e01e-001f-32f8-251633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085606Z-16849878b787wpl5wqkt5731b40000000150000000000v1a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:06 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:06 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:06 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:06 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: d13b9d4f-c01e-0014-770d-26a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085606Z-17c5cb586f6q4vmqk5qfzgptrg00000002hg000000006acw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:06 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:06 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:06 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:06 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 8d3096ad-201e-005d-6f5b-26afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085606Z-17c5cb586f6q4vmqk5qfzgptrg00000002mg000000003un4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:06 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:06 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:06 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 1c275e9e-901e-0048-342c-26b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085606Z-r197bdfb6b4cz6xrsdncwtgzd40000000rk000000000257t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:07 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:06 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:06 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 384d3f9c-b01e-003d-2424-26d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085606Z-17c5cb586f67hhlz1ecw6yxtp000000002n0000000005r90 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:07 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:06 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:07 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:06 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 53fe968a-201e-0096-055e-26ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085606Z-16849878b78625wls3r8psr7u000000000g0000000006uwv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:56:07 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:06 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:07 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 6cbbe1db-401e-0083-6516-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085607Z-16849878b785jrf8dn0d2rczaw00000001d000000000bnzk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:07 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:07 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:07 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: ee7a308c-c01e-00a1-620b-227e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085607Z-16849878b78s2lqfdex4tmpp780000000900000000006xct x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:07 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:07 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:07 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:07 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 16b9c19d-f01e-0052-0d9e-269224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085607Z-16849878b786lft2mu9uftf3y400000001eg00000000f9k2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:56:07 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:07 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:07 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 3c45f43b-a01e-00ab-363f-269106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085607Z-17c5cb586f6w4mfs5xcmnrny6n00000001v0000000002qr8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:07 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:07 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:07 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 965686a0-401e-008c-4bf2-2486c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085607Z-15b8d89586fsx9lfqmgrbzpgmg0000000g0g000000002w5y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:07 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:07 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:07 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: ffa56774-c01e-007a-6c38-26b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085607Z-16849878b786lft2mu9uftf3y400000001p0000000000sbn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:07 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:08 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:08 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: ac69ef67-e01e-001f-7714-221633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085608Z-16849878b78fssff8btnns3b1400000000fg0000000061z4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:08 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:08 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:08 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:08 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: d9732123-901e-007b-1098-25ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085608Z-16849878b78j5kdg3dndgqw0vg00000001y000000000dfye x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:08 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:08 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:08 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 933aac65-d01e-007a-51aa-26f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085608Z-16849878b786vsxz21496wc2qn000000091000000000a931 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:08 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:08 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:08 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: fa910cef-e01e-003c-72dd-21c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085608Z-16849878b787wpl5wqkt5731b400000001400000000035h1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:08 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:08 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:08 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: e4f93586-101e-0046-3eac-2491b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085608Z-15b8d89586frzkk2umu6w8qnt80000000fk000000000a242 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:08 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:09 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:09 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 796b115c-001e-005a-3627-26c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085609Z-17c5cb586f6hhlf5mrwgq3erx8000000017000000000ad9t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:09 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:09 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:09 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: c561987e-801e-0015-0d0b-22f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085609Z-16849878b78bcpfn2qf7sm6hsn00000001wg000000008wyt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:09 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:09 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:09 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 135f94f0-d01e-002b-2a55-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085609Z-16849878b78x6gn56mgecg60qc000000024g000000005g0h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:09 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:09 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:09 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: c52d6895-f01e-001f-0bd3-205dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085609Z-16849878b78625wls3r8psr7u000000000f00000000064fb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:09 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:09 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:09 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:09 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 4e85c478-401e-002a-713d-26c62e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085609Z-r197bdfb6b4c8q4qvwwy2byzsw00000000hg000000000u6t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:56:09 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:10 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:10 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 2f548e5b-201e-003c-5d24-2130f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085610Z-16849878b78gvgmlcfru6nuc540000000900000000003w86 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:10 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:10 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:10 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 2034bdf9-701e-003e-3056-2679b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085610Z-16849878b78q4pnrt955f8nkx800000008rg00000000gagh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:10 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:10 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:10 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:10 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: e37aa075-401e-0067-7f3f-2609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085610Z-17c5cb586f62blg5ss55p9d6fn00000000q000000000c9qx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:10 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:10 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:10 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:10 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: f68a3f25-f01e-0052-02bd-259224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085610Z-16849878b785jrf8dn0d2rczaw00000001d000000000bp2w x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:10 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:10 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:10 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:10 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: c6fd9367-401e-008c-7f80-2686c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085610Z-16849878b78gvgmlcfru6nuc5400000008vg00000000dau9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:10 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:11 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:11 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:11 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 0eea03f1-d01e-0066-098a-21ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085611Z-16849878b78nx5sne3fztmu6xc00000001bg000000002xa2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:11 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:11 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:11 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:11 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: aaf6fada-701e-0053-683a-223a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085611Z-16849878b785g992cz2s9gk35c00000008y000000000bwga x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:11 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:11 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:11 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:11 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: d0d0f8e5-601e-000d-298c-212618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085611Z-16849878b786lft2mu9uftf3y400000001k0000000006ct8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:11 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:11 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:11 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:11 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 19a18c92-701e-0098-0fb0-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085611Z-16849878b78wv88bk51myq5vxc00000000kg000000006mnt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:11 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:11 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:11 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:11 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: f8cf8448-501e-0064-5b5a-261f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085611Z-17c5cb586f6qs7hge7b080kmr000000002b00000000024up x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:11 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:12 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:12 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:12 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 0243abe0-001e-0028-29fb-25c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085612Z-16849878b786lft2mu9uftf3y400000001f000000000esyv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:12 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:12 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:12 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:12 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 33ffbe2f-201e-0085-3800-2534e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085612Z-15b8d89586f2hk28h0h6zye26c00000002v0000000001db8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:12 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:12 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:12 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:12 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 90c23955-201e-0096-7520-26ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085612Z-r197bdfb6b4kq4j5t834fh90qn0000000cc0000000003rpu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:12 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:12 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:12 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:12 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: e6296ddc-301e-0052-0828-2665d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085612Z-17c5cb586f6mhqqb91r8trf2c8000000010g00000000aahv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:12 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:12 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:12 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:12 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: dd040750-801e-0083-62fe-25f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085612Z-r197bdfb6b4hdk8h12qtxfwscn00000000u000000000ccfc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:12 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:13 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:13 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:13 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 14889e7f-701e-0053-13f2-253a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085613Z-16849878b787wpl5wqkt5731b40000000130000000004vf1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:13 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:13 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:13 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:13 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 082c7638-801e-0067-65f2-24fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085613Z-15b8d89586flzzks5bs37v2b9000000004m0000000002rzk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:13 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:13 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:13 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:13 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 4faef820-a01e-0053-6a4e-228603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085613Z-16849878b78j5kdg3dndgqw0vg000000022000000000453v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:13 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:13 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:13 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:13 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 5ec9f71f-c01e-0082-7a31-26af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085613Z-15b8d89586fmhkw429ba5n22m800000001q0000000004mxd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:13 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:13 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:13 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:13 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: d5dedb48-201e-003c-4815-2630f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085613Z-r197bdfb6b429k2s6br3k49qn400000006b000000000ckf5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:13 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:13 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:14 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:13 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 04bfc9b2-001e-0017-54ad-260c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085613Z-16849878b78c5zx4gw8tcga1b400000008x0000000004k3s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:14 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:14 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:14 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:14 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 67bef8b6-101e-008d-2df2-2492e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085614Z-15b8d89586fx2hlt035xdehq580000000fvg000000009gqz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:14 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:14 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:14 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:14 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: cbb0b495-901e-005b-56e4-212005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085614Z-16849878b78x6gn56mgecg60qc000000021g00000000btbw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:14 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:14 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:14 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:14 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: f0c9e92d-201e-0000-1199-25a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085614Z-16849878b785f8wh85a0w3ennn00000008x0000000009s0k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:14 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:14 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:14 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:14 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 94ed8cc5-801e-0083-11f2-24f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085614Z-15b8d89586fwzdd8urmg0p1ebs0000000apg000000002b4h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:14 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:14 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:15 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:14 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 22d1952d-101e-007a-6d50-26047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085614Z-17c5cb586f6dsb4r19gvkc9r7s00000002dg000000005tf6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:15 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:15 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:15 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:15 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 27230864-a01e-0070-6533-26573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085615Z-r197bdfb6b4gqmwlpwzzs5v83s000000017000000000a258 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:15 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:15 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:15 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:15 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 219fbbc4-201e-0071-49b1-26ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085615Z-16849878b78fmrkt2ukpvh9wh400000008w000000000bmqa x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:15 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:15 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:15 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:15 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 0c5aa6f6-c01e-000b-5d92-25e255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085615Z-15b8d89586fzhrwgk23ex2bvhw00000003200000000044mn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:15 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:15 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:15 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:15 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 9a0db76d-d01e-0017-4396-25b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085615Z-16849878b78qf2gleqhwczd21s00000000m000000000136p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:56:15 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:15 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:16 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:15 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: ff6a02c5-601e-003e-572b-263248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085615Z-17c5cb586f6tzc2wdxudxz0zw800000001wg000000008ce2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:16 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:16 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:16 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:16 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: ded904a3-601e-000d-0f3d-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085616Z-17c5cb586f6zrq5bnguxgu7frc00000000yg000000009ns8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:16 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:16 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:16 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:16 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: b2ef1849-d01e-00ad-023d-26e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085616Z-17c5cb586f6w4mfs5xcmnrny6n00000001q0000000009qm8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:16 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:16 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:16 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:16 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 41af9018-001e-0046-0956-26da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085616Z-17c5cb586f6dsb4r19gvkc9r7s000000029g00000000b87y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:16 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:16 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:16 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:16 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 0cf7dd75-a01e-003d-3e63-2698d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085616Z-16849878b78gvgmlcfru6nuc5400000008xg000000008udn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:16 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:16 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:16 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:16 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: e3c3ecc6-001e-0014-1bf2-245151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085616Z-r197bdfb6b429k2s6br3k49qn400000006dg000000006n3g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:16 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:17 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:17 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:17 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 9b0a187b-e01e-0020-61f3-24de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085617Z-15b8d89586f2hk28h0h6zye26c00000002ng00000000ahnd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:56:17 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:17 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:17 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:17 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 22a25694-101e-007a-3b3f-26047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085617Z-r197bdfb6b466qclztvgs64z1000000001sg000000005an9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:17 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:17 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:17 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:17 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: eb22034c-601e-0070-2f28-26a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085617Z-17c5cb586f6zrq5bnguxgu7frc00000000yg000000009nth x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:17 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:17 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:17 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:17 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: e014a2e3-501e-0035-060b-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085617Z-16849878b78j5kdg3dndgqw0vg000000021g000000004rfp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:17 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:17 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:17 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:17 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: baa41b4f-401e-00ac-2c28-210a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085617Z-16849878b78wv88bk51myq5vxc00000000p0000000002bdc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:17 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:18 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:18 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:18 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 9b3a7460-601e-003e-70a8-243248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085618Z-15b8d89586f4zwgbgswvrvz4vs00000001mg000000000vmm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:18 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:18 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:18 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:18 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 989b5e1d-301e-003f-2bee-25266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085618Z-16849878b78hz7zj8u0h2zng1400000008y000000000fdpy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:18 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:18 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:18 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:18 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: cf3e7330-401e-0078-5ca6-264d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085618Z-16849878b78lhh9t0fb3392enw00000008u000000000az31 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:18 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:18 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:18 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:18 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 2dbb46b4-901e-0067-695f-26b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085618Z-16849878b78gvgmlcfru6nuc5400000008w000000000c2a6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:18 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:18 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:18 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:18 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 8c1a2bd7-001e-008d-4028-26d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085618Z-17c5cb586f6zrq5bnguxgu7frc0000000100000000008bc5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:18 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:19 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:19 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:19 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 36aee691-501e-0047-745d-26ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085619Z-16849878b78lhh9t0fb3392enw00000008x0000000004x9p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:56:19 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:19 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:19 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:19 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: bf00834f-601e-003d-3a28-266f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085619Z-r197bdfb6b466qclztvgs64z1000000001n000000000cy28 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:19 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:19 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:19 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:19 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: c22b4ca9-401e-0029-7f5c-269b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085619Z-17c5cb586f6g6g2sbe6edp75y40000000280000000006ynk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:19 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:19 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:19 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:19 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 697bb720-201e-0071-0781-25ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085619Z-16849878b78s2lqfdex4tmpp7800000008zg000000008ccw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:19 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:19 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:19 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:19 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 4673aea1-f01e-00aa-023d-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085619Z-r197bdfb6b4c8q4qvwwy2byzsw00000000hg000000000ugg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:56:19 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:19 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:20 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:19 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 3d4cb055-601e-0097-01e5-21f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085619Z-16849878b78k8q5pxkgux3mbgg00000008wg00000000apc3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:20 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:20 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:20 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:20 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: a1fd626a-d01e-0017-5dfc-24b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085620Z-15b8d89586fvk4kmbg8pf84y88000000014g000000008wba x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:56:20 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:20 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:20 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:20 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: efcf68a2-a01e-0084-11f2-249ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085620Z-15b8d89586flzzks5bs37v2b9000000004k0000000003w1m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:20 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:20 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:20 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:20 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 4a3ae400-b01e-0001-38e4-2546e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085620Z-16849878b786lft2mu9uftf3y400000001g000000000bs5h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:20 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:20 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:20 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:20 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: c9ef38c2-001e-002b-2fff-2599f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085620Z-16849878b78smng4k6nq15r6s400000001v0000000005e08 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:20 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:20 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:20 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:20 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 12d17a45-e01e-0051-1e28-2684b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085620Z-17c5cb586f6w4mfs5xcmnrny6n00000001qg000000009cn7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:20 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:20 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:20 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 1fd9bb61-701e-003e-173a-2679b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085620Z-16849878b78z5q7jpbgf6e9mcw000000091000000000brub x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:21 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:20 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:21 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 366b13b4-c01e-0082-1a80-26af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085621Z-16849878b78q4pnrt955f8nkx800000008v0000000009c5q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:21 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:21 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:21 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: a08c3447-701e-0098-6ef3-24395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085621Z-r197bdfb6b47gqdjqh2kwsuz8c00000000m000000000d0r7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:21 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:21 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:21 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:21 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 10ca92f3-d01e-008e-1b31-22387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085621Z-16849878b7898p5f6vryaqvp58000000015000000000638r x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:21 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:21 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:21 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 27f7fbdb-301e-0096-2237-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085621Z-16849878b785jrf8dn0d2rczaw00000001gg000000003ea9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:21 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:21 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:21 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 3452001d-001e-0065-12df-250b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085621Z-16849878b785g992cz2s9gk35c000000092g000000002bum x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:21 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:21 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:22 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:22 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: 2045ee81-701e-003e-375a-2679b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085621Z-17c5cb586f6hhlf5mrwgq3erx800000001dg000000001k22 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:22 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:22 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:22 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:22 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: c53c8a19-f01e-0096-07f7-2110ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085622Z-16849878b788tnsxzb2smucwdc00000008x000000000dyry x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:22 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:22 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:22 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:22 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 12b50f8a-301e-0033-52f0-25fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085622Z-15b8d89586fvk4kmbg8pf84y88000000018g0000000031qn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:22 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:22 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:22 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:22 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 458e69a0-101e-005a-559e-26882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085622Z-16849878b78nx5sne3fztmu6xc000000016000000000ed2t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:22 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:22 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:22 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:22 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: de5f6a9b-601e-000d-3d18-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085622Z-16849878b78jfqwd1dsrhqg3aw0000000950000000001az7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:22 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:22 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:22 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:22 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: f9b59f27-e01e-0099-2c28-26da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085622Z-15b8d89586f4zwgbgswvrvz4vs00000001cg00000000aghp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:22 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:56:23 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:56:23 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:56:23 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: dd440b1a-a01e-003d-1afb-2598d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T085623Z-r197bdfb6b47gqdjqh2kwsuz8c00000000mg00000000c2e0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:56:23 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 3732, Parent PID: 5600

General

Target ID:	0
Start time:	04:55:00
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3980, Parent PID: 3732

General

Target ID:	2
Start time:	04:55:04
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2416 --field-trial-handle=2232,i,5194111989753532047,8404869072147356295,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6308, Parent PID: 5600

General

Target ID:	3
Start time:	04:55:05
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://s.ksrndkehqnwntyxlhgto.com"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: s.ksrndkehqnwntyxlhgto.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: s.ksrndkehqnwntyxlhgto.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.ksrndkehqnwntyxlhgto.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=pBxyZRaeV9n4ZSn&MD=No15XGcb HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=pBxyZRaeV9n4ZSn&MD=No15XGcb HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: s.ksrndkehqnwntyxlhgto.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: s.ksrndkehqnwntyxlhgto.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://s.ksrndkehqnwntyxlhgto.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 41

Chrome Cache Entry: 42

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 3732, Parent PID: 5600

General

Chronological Activities

Analysis Process: chrome.exePID: 3980, Parent PID: 3732

General

Chronological Activities

Analysis Process: chrome.exePID: 6308, Parent PID: 5600

General

Chronological Activities

Disassembly

Windows Analysis Report
http://s.ksrndkehqnwntyxlhgto.com