Edit tour

Windows Analysis Report
https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2FsubscriΡtions&p=bT00NTQ5MjI1Zi1iOGVjLTQ5MWYtODYyMy03ODE1ZmYxMjg0ZjImcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l

Overview

General Information

Sample URL:	https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2FsubscriΡtions&p=bT00NTQ5MjI1Zi1iOGVjLTQ5MWYtODYyMy03ODE1ZmYxMjg0ZjImcz0wMDAwM
Analysis ID:	1541959
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4544 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4228 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1992,i,7894049459252343996,17293679398756792614,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6312 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT00NTQ5MjI1Zi1iOGVjLTQ5MWYtODYyMy03ODE1ZmYxMjg0ZjImcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DgHnSIOnow6zLEm8fNONN2wPi-1lAqeb4tta4Z3NFsTxYYeTgkdOOBXYZ3c-JB9zdtYteefQ55mH-zz5elcNaeK1fcfDauzSEAWD6Mxhx5sL8iznZuelcviQtJ2uja27R8CqObHXJB6-CZ0WeBDiTaz7R4BW1LZe9DLFrBITsMzMoaATFK34ZJyFgo4biZhr_&response_mode=form_post&nonce=638654449902636656.Y2FiYzNkM2ItZDMzMi00Mzg3LWI5NDUtYWFmN2NjODVkZjNlYTE4Y2I2MGUtOTAyYS00MGZkLTk3MGItN2JlZDYzZjYwOWVl&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=85329f14-a863-4320-bbc1-a10361ca0572&claims=%7B%22id_token%22%3A%7B%22xms_cc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&x-client-SKU=ID_NET472&x-client-ver=8.1.0.0	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DgHnSIOnow6zLEm8fNONN2wPi-1lAqeb4tta4Z3NFsTxYYeTgkdOOBXYZ3c-JB9zdtYteefQ55mH-zz5elcNaeK1fcfDauzSEAWD6Mxhx5sL8iznZuelcviQtJ2uja27R8CqObHXJB6-CZ0WeBDiTaz7R4BW1LZe9DLFrBITsMzMoaATFK34ZJyFgo4biZhr_&response_mode=form_post&nonce=638654449902636656.Y2FiYzNkM2ItZDMzMi00Mzg3LWI5NDUtYWFmN2NjODVkZjNlYTE4Y2I2MGUtOTAyYS00MGZkLTk3MGItN2JlZDYzZjYwOWVl&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=85329f14-a863-4320-bbc1-a10361ca0572&claims=%7B%22id_token%22%3A%7B%22xms_cc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&x-client-SKU=ID_NET472&x-client-ver=8.1.0.0&sso_reload=true	HTTP Parser: Number of links: 0

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DgHnSIOnow6zLEm8fNONN2wPi-1lAqeb4tta4Z3NFsTxYYeTgkdOOBXYZ3c-JB9zdtYteefQ55mH-zz5elcNaeK1fcfDauzSEAWD6Mxhx5sL8iznZuelcviQtJ2uja27R8CqObHXJB6-CZ0WeBDiTaz7R4BW1LZe9DLFrBITsMzMoaATFK34ZJyFgo4biZhr_&response_mode=form_post&nonce=638654449902636656.Y2FiYzNkM2ItZDMzMi00Mzg3LWI5NDUtYWFmN2NjODVkZjNlYTE4Y2I2MGUtOTAyYS00MGZkLTk3MGItN2JlZDYzZjYwOWVl&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=85329f14-a863-4320-bbc1-a10361ca0572&claims=%7B%22id_token%22%3A%7B%22xms_cc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&x-client-SKU=ID_NET472&x-client-ver=8.1.0.0

HTTP Parser: Base64 decoded: cabc3d3b-d332-4387-b945-aaf7cc85df3ea18cb60e-902a-40fd-970b-7bed63f609ee

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DgHnSIOnow6zLEm8fNONN2wPi-1lAqeb4tta4Z3NFsTxYYeTgkdOOBXYZ3c-JB9zdtYteefQ55mH-zz5elcNaeK1fcfDauzSEAWD6Mxhx5sL8iznZuelcviQtJ2uja27R8CqObHXJB6-CZ0WeBDiTaz7R4BW1LZe9DLFrBITsMzMoaATFK34ZJyFgo4biZhr_&response_mode=form_post&nonce=638654449902636656.Y2FiYzNkM2ItZDMzMi00Mzg3LWI5NDUtYWFmN2NjODVkZjNlYTE4Y2I2MGUtOTAyYS00MGZkLTk3MGItN2JlZDYzZjYwOWVl&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=85329f14-a863-4320-bbc1-a10361ca0572&claims=%7B%22id_token%22%3A%7B%22xms_cc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&x-client-SKU=ID_NET472&x-client-ver=8.1.0.0	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DgHnSIOnow6zLEm8fNONN2wPi-1lAqeb4tta4Z3NFsTxYYeTgkdOOBXYZ3c-JB9zdtYteefQ55mH-zz5elcNaeK1fcfDauzSEAWD6Mxhx5sL8iznZuelcviQtJ2uja27R8CqObHXJB6-CZ0WeBDiTaz7R4BW1LZe9DLFrBITsMzMoaATFK34ZJyFgo4biZhr_&response_mode=form_post&nonce=638654449902636656.Y2FiYzNkM2ItZDMzMi00Mzg3LWI5NDUtYWFmN2NjODVkZjNlYTE4Y2I2MGUtOTAyYS00MGZkLTk3MGItN2JlZDYzZjYwOWVl&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=85329f14-a863-4320-bbc1-a10361ca0572&claims=%7B%22id_token%22%3A%7B%22xms_cc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&x-client-SKU=ID_NET472&x-client-ver=8.1.0.0&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL

HTTP Parser: <input type="password" .../> found

HTTP Parser: No favicon

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DgHnSIOnow6zLEm8fNONN2wPi-1lAqeb4tta4Z3NFsTxYYeTgkdOOBXYZ3c-JB9zdtYteefQ55mH-zz5elcNaeK1fcfDauzSEAWD6Mxhx5sL8iznZuelcviQtJ2uja27R8CqObHXJB6-CZ0WeBDiTaz7R4BW1LZe9DLFrBITsMzMoaATFK34ZJyFgo4biZhr_&response_mode=form_post&nonce=638654449902636656.Y2FiYzNkM2ItZDMzMi00Mzg3LWI5NDUtYWFmN2NjODVkZjNlYTE4Y2I2MGUtOTAyYS00MGZkLTk3MGItN2JlZDYzZjYwOWVl&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=85329f14-a863-4320-bbc1-a10361ca0572&claims=%7B%22id_token%22%3A%7B%22xms_cc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&x-client-SKU=ID_NET472&x-client-ver=8.1.0.0	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DgHnSIOnow6zLEm8fNONN2wPi-1lAqeb4tta4Z3NFsTxYYeTgkdOOBXYZ3c-JB9zdtYteefQ55mH-zz5elcNaeK1fcfDauzSEAWD6Mxhx5sL8iznZuelcviQtJ2uja27R8CqObHXJB6-CZ0WeBDiTaz7R4BW1LZe9DLFrBITsMzMoaATFK34ZJyFgo4biZhr_&response_mode=form_post&nonce=638654449902636656.Y2FiYzNkM2ItZDMzMi00Mzg3LWI5NDUtYWFmN2NjODVkZjNlYTE4Y2I2MGUtOTAyYS00MGZkLTk3MGItN2JlZDYzZjYwOWVl&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=85329f14-a863-4320-bbc1-a10361ca0572&claims=%7B%22id_token%22%3A%7B%22xms_cc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&x-client-SKU=ID_NET472&x-client-ver=8.1.0.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DgHnSIOnow6zLEm8fNONN2wPi-1lAqeb4tta4Z3NFsTxYYeTgkdOOBXYZ3c-JB9zdtYteefQ55mH-zz5elcNaeK1fcfDauzSEAWD6Mxhx5sL8iznZuelcviQtJ2uja27R8CqObHXJB6-CZ0WeBDiTaz7R4BW1LZe9DLFrBITsMzMoaATFK34ZJyFgo4biZhr_&response_mode=form_post&nonce=638654449902636656.Y2FiYzNkM2ItZDMzMi00Mzg3LWI5NDUtYWFmN2NjODVkZjNlYTE4Y2I2MGUtOTAyYS00MGZkLTk3MGItN2JlZDYzZjYwOWVl&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=85329f14-a863-4320-bbc1-a10361ca0572&claims=%7B%22id_token%22%3A%7B%22xms_cc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&x-client-SKU=ID_NET472&x-client-ver=8.1.0.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DgHnSIOnow6zLEm8fNONN2wPi-1lAqeb4tta4Z3NFsTxYYeTgkdOOBXYZ3c-JB9zdtYteefQ55mH-zz5elcNaeK1fcfDauzSEAWD6Mxhx5sL8iznZuelcviQtJ2uja27R8CqObHXJB6-CZ0WeBDiTaz7R4BW1LZe9DLFrBITsMzMoaATFK34ZJyFgo4biZhr_&response_mode=form_post&nonce=638654449902636656.Y2FiYzNkM2ItZDMzMi00Mzg3LWI5NDUtYWFmN2NjODVkZjNlYTE4Y2I2MGUtOTAyYS00MGZkLTk3MGItN2JlZDYzZjYwOWVl&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=85329f14-a863-4320-bbc1-a10361ca0572&claims=%7B%22id_token%22%3A%7B%22xms_cc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&x-client-SKU=ID_NET472&x-client-ver=8.1.0.0&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DgHnSIOnow6zLEm8fNONN2wPi-1lAqeb4tta4Z3NFsTxYYeTgkdOOBXYZ3c-JB9zdtYteefQ55mH-zz5elcNaeK1fcfDauzSEAWD6Mxhx5sL8iznZuelcviQtJ2uja27R8CqObHXJB6-CZ0WeBDiTaz7R4BW1LZe9DLFrBITsMzMoaATFK34ZJyFgo4biZhr_&response_mode=form_post&nonce=638654449902636656.Y2FiYzNkM2ItZDMzMi00Mzg3LWI5NDUtYWFmN2NjODVkZjNlYTE4Y2I2MGUtOTAyYS00MGZkLTk3MGItN2JlZDYzZjYwOWVl&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=85329f14-a863-4320-bbc1-a10361ca0572&claims=%7B%22id_token%22%3A%7B%22xms_cc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&x-client-SKU=ID_NET472&x-client-ver=8.1.0.0	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DgHnSIOnow6zLEm8fNONN2wPi-1lAqeb4tta4Z3NFsTxYYeTgkdOOBXYZ3c-JB9zdtYteefQ55mH-zz5elcNaeK1fcfDauzSEAWD6Mxhx5sL8iznZuelcviQtJ2uja27R8CqObHXJB6-CZ0WeBDiTaz7R4BW1LZe9DLFrBITsMzMoaATFK34ZJyFgo4biZhr_&response_mode=form_post&nonce=638654449902636656.Y2FiYzNkM2ItZDMzMi00Mzg3LWI5NDUtYWFmN2NjODVkZjNlYTE4Y2I2MGUtOTAyYS00MGZkLTk3MGItN2JlZDYzZjYwOWVl&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=85329f14-a863-4320-bbc1-a10361ca0572&claims=%7B%22id_token%22%3A%7B%22xms_cc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&x-client-SKU=ID_NET472&x-client-ver=8.1.0.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DgHnSIOnow6zLEm8fNONN2wPi-1lAqeb4tta4Z3NFsTxYYeTgkdOOBXYZ3c-JB9zdtYteefQ55mH-zz5elcNaeK1fcfDauzSEAWD6Mxhx5sL8iznZuelcviQtJ2uja27R8CqObHXJB6-CZ0WeBDiTaz7R4BW1LZe9DLFrBITsMzMoaATFK34ZJyFgo4biZhr_&response_mode=form_post&nonce=638654449902636656.Y2FiYzNkM2ItZDMzMi00Mzg3LWI5NDUtYWFmN2NjODVkZjNlYTE4Y2I2MGUtOTAyYS00MGZkLTk3MGItN2JlZDYzZjYwOWVl&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=85329f14-a863-4320-bbc1-a10361ca0572&claims=%7B%22id_token%22%3A%7B%22xms_cc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&x-client-SKU=ID_NET472&x-client-ver=8.1.0.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DgHnSIOnow6zLEm8fNONN2wPi-1lAqeb4tta4Z3NFsTxYYeTgkdOOBXYZ3c-JB9zdtYteefQ55mH-zz5elcNaeK1fcfDauzSEAWD6Mxhx5sL8iznZuelcviQtJ2uja27R8CqObHXJB6-CZ0WeBDiTaz7R4BW1LZe9DLFrBITsMzMoaATFK34ZJyFgo4biZhr_&response_mode=form_post&nonce=638654449902636656.Y2FiYzNkM2ItZDMzMi00Mzg3LWI5NDUtYWFmN2NjODVkZjNlYTE4Y2I2MGUtOTAyYS00MGZkLTk3MGItN2JlZDYzZjYwOWVl&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=85329f14-a863-4320-bbc1-a10361ca0572&claims=%7B%22id_token%22%3A%7B%22xms_cc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&x-client-SKU=ID_NET472&x-client-ver=8.1.0.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49780 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: nam.safelink.emails.azure.net to https://admin.microsoft.com/adminportal/home?#/subscriptions

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT00NTQ5MjI1Zi1iOGVjLTQ5MWYtODYyMy03ODE1ZmYxMjg0ZjImcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l HTTP/1.1Host: nam.safelink.emails.azure.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_DQTmGfOEMmPUR-Vehc8U6Q2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_DQTmGfOEMmPUR-Vehc8U6Q2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: nam.safelink.emails.azure.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net

Source: chromecache_60.2.dr, chromecache_76.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_60.2.dr, chromecache_76.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_60.2.dr, chromecache_76.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_57.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_57.2.dr	String found in binary or memory: https://login.windows-ppe.net

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49780 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@18/33@14/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1992,i,7894049459252343996,17293679398756792614,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT00NTQ5MjI1Zi1iOGVjLTQ5MWYtODYyMy03ODE1ZmYxMjg0ZjImcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1992,i,7894049459252343996,17293679398756792614,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
http://knockoutjs.com/	0%	URL Reputation	safe
https://login.microsoftonline.com	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php)	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
s-part-0023.t-0009.t-msedge.net	13.107.246.51	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	unknown
www.google.com	142.250.186.132	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
nam.safelink.emails.azure.net	unknown	unknown	false	unknown
identity.nel.measure.office.net	unknown	unknown	false	unknown
aadcdn.msftauth.net	unknown	unknown	false	unknown
login.microsoftonline.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://knockoutjs.com/	chromecache_60.2.dr, chromecache_76.2.dr	false	URL Reputation: safe	unknown
https://login.microsoftonline.com	chromecache_57.2.dr	false	URL Reputation: safe	unknown
http://www.opensource.org/licenses/mit-license.php)	chromecache_60.2.dr, chromecache_76.2.dr	false	URL Reputation: safe	unknown
https://github.com/douglascrockford/JSON-js	chromecache_60.2.dr, chromecache_76.2.dr	false		unknown
https://login.windows-ppe.net	chromecache_57.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	unknown	United States	15169	GOOGLEUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
142.250.186.132	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1541959
Start date and time:	2024-10-25 11:22:08 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 21s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2FsubscriΡtions&p=bT00NTQ5MjI1Zi1iOGVjLTQ5MWYtODYyMy03ODE1ZmYxMjg0ZjImcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@18/33@14/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.67, 172.217.16.206, 142.250.110.84, 34.104.35.123, 13.107.6.156, 20.190.159.64, 20.190.159.0, 20.190.159.73, 20.190.159.4, 40.126.31.67, 40.126.31.69, 20.190.159.23, 40.126.31.73, 2.18.64.215, 2.18.64.220, 40.126.32.134, 20.190.160.22, 40.126.32.136, 40.126.32.68, 40.126.32.133, 20.190.160.17, 40.126.32.72, 40.126.32.140, 4.175.87.197, 142.250.186.42, 142.250.185.170, 142.250.186.170, 142.250.185.234, 142.250.185.106, 216.58.212.138, 172.217.18.106, 142.250.185.202, 216.58.206.74, 142.250.185.138, 142.250.185.74, 142.250.184.234, 216.58.212.170, 172.217.23.106, 216.58.206.42, 142.250.181.234, 199.232.214.172, 192.229.221.95, 13.85.23.206, 20.242.39.171, 172.217.18.3
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT00NTQ5MjI1Zi1iOGVjLTQ5MWYtODYyMy03ODE1ZmYxMjg0ZjImcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	dropped
Size (bytes):	116365
Entropy (8bit):	7.997737813291819
Encrypted:	true
SSDEEP:	1536:9IyZY3F6VvgB9lnrhw1h+WbhcNtrpUzwXkqGeKTgcao2AYvXMpclkcKAXWG8NYh:9BZ5hu91Nwz+trpGmkReMgcaQYXlkcjR
MD5:	2D3FBED6DDD719FCC1BFB500B612FCEC
SHA1:	CD91B795DDE806AC8A38E51CCB6E8BAD8E57DA1B
SHA-256:	B2566B646F02DF4CE30B05D8223B78130A719D4EC9E4794A0106C371ADE33CC7
SHA-512:	A870E514B325D6FDC4D154438A8DD333C7AB46E545C1B27AC4869D9F1D8594CA1CDC530F5E96C835220DDAD4E1CEF841673696978031B5237E783972AEE701D1
Malicious:	false
Reputation:	low
Preview:	...........k[.H.(.}..[..-..c.0DFxHBz.I......O.a...#yt......k...J..&...........^.~...._..j...W;.8<.....]....m...~.}<.8~s.~=.(....qm.Oy.~....jaP......h.F^......\|oZ.G.M-...,...a..~..GW\|...L....N.(y...Z-..Cm......p.......?.5/.QmS..b^K...jw..8.}..Q.....!.o..8...&X.x-.Im.F.D..U;.....-.T.:...1........8Ka..M.L.ZZ'....>........x....v.S;.<...0J.I.0.G.....B.F..c.k.~....C.:...r..,.w.q~....q......#42V.q..f\|.kK...1o.mP.}.......N..n.w6.%^M.d.;...~2I.Z..fs...S/......F..=?...5....s..N.+.A.mx...j.T......?..W._p6.\|.}\|.{O.....2..`..._......g....j..xb^^...a.y.....s......4....q.Y..^T....X,.....m..~v,.....WP.U...:O".YoRX...7..S...zI.v.......mq.....E.,z.%....L\|.>.M.'i..ki3.u+.~...x.=...?6.%?.[.G.`Z=.$.w..4.."...R.1.k.\|..N.`......3...7.].'.E..).az......<a....4q..6.(..=~..........frk..?M#^Q.z..A..M.f.......S....s..d.e91._,zO.[X.......4.G..!.9Vg.......j.-?~.z.w..f.M............,...Z....w5..#.^..M.P.'.X.n/..mW.\|......0...w../...>\...l.......h...q>.w...FC[....7.

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46591)
Category:	downloaded
Size (bytes):	142367
Entropy (8bit):	5.430597817875451
Encrypted:	false
SSDEEP:	1536:PyeDWgSr6fTPRUbx3XCg/MJA5NOii5WLeVdgWLDY2Js0VgtWyTJmxyAXP3onrGGK:IgD1g/Mq5L9EveUynbBwsIccp
MD5:	CCAA31FD031C4C856EB7B986FD9F447B
SHA1:	0A809EABCDB95FA04DE5F8409B3BC994ED65CBD1
SHA-256:	3D40B4129B8B4C284908636AE46D72EA053F286FB5FE45DB78351B5B2CFC1EB9
SHA-512:	4B5B2271DB5F640FEBF13A7C0BDBD630C73530000F1593046D090585D1752E239D894614E23E801BE4C6A379406B6EF521423FA27C3865C3CD4ABB0A64823780
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	downloaded
Size (bytes):	116365
Entropy (8bit):	7.997737813291819
Encrypted:	true
SSDEEP:	1536:9IyZY3F6VvgB9lnrhw1h+WbhcNtrpUzwXkqGeKTgcao2AYvXMpclkcKAXWG8NYh:9BZ5hu91Nwz+trpGmkReMgcaQYXlkcjR
MD5:	2D3FBED6DDD719FCC1BFB500B612FCEC
SHA1:	CD91B795DDE806AC8A38E51CCB6E8BAD8E57DA1B
SHA-256:	B2566B646F02DF4CE30B05D8223B78130A719D4EC9E4794A0106C371ADE33CC7
SHA-512:	A870E514B325D6FDC4D154438A8DD333C7AB46E545C1B27AC4869D9F1D8594CA1CDC530F5E96C835220DDAD4E1CEF841673696978031B5237E783972AEE701D1
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js
Preview:	...........k[.H.(.}..[..-..c.0DFxHBz.I......O.a...#yt......k...J..&...........^.~...._..j...W;.8<.....]....m...~.}<.8~s.~=.(....qm.Oy.~....jaP......h.F^......\|oZ.G.M-...,...a..~..GW\|...L....N.(y...Z-..Cm......p.......?.5/.QmS..b^K...jw..8.}..Q.....!.o..8...&X.x-.Im.F.D..U;.....-.T.:...1........8Ka..M.L.ZZ'....>........x....v.S;.<...0J.I.0.G.....B.F..c.k.~....C.:...r..,.w.q~....q......#42V.q..f\|.kK...1o.mP.}.......N..n.w6.%^M.d.;...~2I.Z..fs...S/......F..=?...5....s..N.+.A.mx...j.T......?..W._p6.\|.}\|.{O.....2..`..._......g....j..xb^^...a.y.....s......4....q.Y..^T....X,.....m..~v,.....WP.U...:O".YoRX...7..S...zI.v.......mq.....E.,z.%....L\|.>.M.'i..ki3.u+.~...x.=...?6.%?.[.G.`Z=.$.w..4.."...R.1.k.\|..N.`......3...7.].'.E..).az......<a....4q..6.(..=~..........frk..?M#^Q.z..A..M.f.......S....s..d.e91._,zO.[X.......4.G..!.9Vg.......j.-?~.z.w..f.M............,...Z....w5..#.^..M.P.'.X.n/..mW.\|......0...w../...>\...l.......h...q>.w...FC[....7.

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 449028
Category:	downloaded
Size (bytes):	122065
Entropy (8bit):	7.997626422878093
Encrypted:	true
SSDEEP:	3072:MWJZiGtRbjSj7NS6PV1gunmm+RWZ6tb6Km5toYKcvleGgwZHfF:MCZ7buS691gemmIg6tuvHvg+d
MD5:	AA8BC8C5EE9148CD994872B1438C5ED6
SHA1:	955C9B9B66442B43A6B6290CF54E20BBCF144E18
SHA-256:	66C62A7D3E076AAA538C7F589BB2661726F18EF9343DF6F06A714C37A04B7A61
SHA-512:	288E76CC63F72885B47515716389CD03F840237C269CB03463348A576A565D12497AD2AD52430F1888FE0F2468C755DD43D08498CF11A6CB864301B7739B8569
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_DQTmGfOEMmPUR-Vehc8U6Q2.js
Preview:	...........{W.H.8....F3...a,..E.Yc..i......,...Y.J2.1......R.LU....s.AY..................Oix..).NK7...KW...........`....G/..=.....3....0y..F.0......7.l.4..i)yd.Y...$..^.@....R......%o...J..gP.7..(.7.....0..V...j..#.Yi..,.<z.c..s.0..I)b...x...&....R..8..G.ji......-......\.pL...0@/....0h,...[U.DZ..7.R.....}6./...o.....:.;w.jn.1....._..<..b.{.... ..J.....9.8{.16eA...........:B#.K,N...8.T.....$.R..8...?.R.^3...n...$......K...N..p>.....<...........9.Y.......pj{.l.J..Y..W.........A.......:py.m...+..B........l..uO...v.G..q..VMw........`.<..;;.....{}0.US..O..m..v<x..%3..Tu`...U...;.~{....c.?....?...v ..-E..2......{+.?.....va8...i...8)W.....X..7... EC.h..e....D,.GA..W.Na!..T..$k..[..2..ry .1,D}LdY=..a.>\|k...-OE/.A...}./'V/..7%#..o(a.S....e!P8..UI.#.n.{).@.I....u.va.....$z#...[.BX......l.\|.U.Q.....&s\.nT..........Z...LK.~.\|."...D;U{6......T$.C..^\|%...e..!.5..T.......R........hY...~T...Z.....s...xZ\|.vcO..)+k..Up.)#O..!Qr.#ty..

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57443
Category:	dropped
Size (bytes):	16326
Entropy (8bit):	7.987374325584103
Encrypted:	false
SSDEEP:	384:GTwafLJjHlgnek9V15z6Brrwb9tYt3skOUAQC1:GTtTJjHlgneqTz658ht/eAQw
MD5:	C217AE35B8592DC9F1E680487DAD094F
SHA1:	2E642562C2BFD8968629317FF212684C7EB59193
SHA-256:	D41992E79D7BCFCC1F32597208DD99033D99C04882EAFCC8508F2FA0EE728C6B
SHA-512:	EAF3BF49BCF58A7F7C39CBF35FD75862FEE98F611536080DFC794D288274CB9D67E95D0299679F7981E110B2577A47579D3623C7F11A6AC2A0CFA56AAEA2CAB0
Malicious:	false
Reputation:	low
Preview:	...........}Ms#.......\.@..'F.........C)$....`.......Q.x7...}..'.}..?e#...QU]....Vo.................?........w!......=.G...P.../......8z....q._5....g..}g..31......l...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.>............4....F,&c.)n.[.pcQp...4...6...i.............CkL=....'.\..L......2.A..o.u..."p.. Xx.......'l.[w..'c/^.FP.....q.h4.R+X.x...d..M.}.Z,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j.7.....?.)..t.z.-..m.]..3y...3@.3YO.KSz]...4.b........V..+.%.[.&........l.H>G.^<..{.$"..-.i.........`qcw...`.[....as[.+.X...n..X..%,:......am."a....^o@@.`].....( (b...k..B.0.....AX.D.?...,..-<@k.;..(*..C.]...:.nn..8..s...."4.. ...J...P.n....F.3G..u..;9&.{.2.80.XB.....@.qw.:../.`.P?.+t..w6.a~..7...8k..U._......k,..o.....yQ..r.....}.E...B.r......?{...\fB....-.).Fb.;.p.N?(..P.?..p....F........)p..,`l...o@.;.x.....:..f.E....<0..#K\...K(?K/OX

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	dropped
Size (bytes):	35168
Entropy (8bit):	7.99275807202193
Encrypted:	true
SSDEEP:	768:FlTfWbX2KT+Hid0L7lumndasuVyeLtCR4sqvrdYnN6UcepZtf/r6:LgbT+Hid0TFbeLtUGvrdCNqepbHr6
MD5:	D3B6AE9986DF244AB03412CC700335D0
SHA1:	BAAA1F9899178938F3881F09B18265E47DA806E3
SHA-256:	CA50059111D30C2E212C90805792EB543548AEF0D4941E886A778E3DCE0B9066
SHA-512:	755C57FBC9BECE435A477F76C5E8198CA8942C23BE667ACAB83A00E5CD4F54075B10AA07C7FDC10C38FC3D5C0C406C9132FEB5B67BA5BCCC57EF796054A84E7C
Malicious:	false
Reputation:	low
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........:..z.>.y..u.....N...^..S.......z~@..;...n...K........x..A]....F.8X&Em..P.s.....a.g.\|.d......._..C`.xQ...\..'...QP....?.R.{?....\|.>........E4.GRz...z.k.z.}....h..>.{[E.:.....Pu. ..e6_.o.p*.w...>...:...o.k~...~..&E._..}}.}%[. ..#......z.5M.b.....z..k.H.4...l..D.o...z..M.+../..`....?y.J4.=....u.....Z.....E.d.....{0H^...8.....9..h......d..6j......../..z..V<.`.F.xm.y..yt.J....

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 449028
Category:	dropped
Size (bytes):	122065
Entropy (8bit):	7.997626422878093
Encrypted:	true
SSDEEP:	3072:MWJZiGtRbjSj7NS6PV1gunmm+RWZ6tb6Km5toYKcvleGgwZHfF:MCZ7buS691gemmIg6tuvHvg+d
MD5:	AA8BC8C5EE9148CD994872B1438C5ED6
SHA1:	955C9B9B66442B43A6B6290CF54E20BBCF144E18
SHA-256:	66C62A7D3E076AAA538C7F589BB2661726F18EF9343DF6F06A714C37A04B7A61
SHA-512:	288E76CC63F72885B47515716389CD03F840237C269CB03463348A576A565D12497AD2AD52430F1888FE0F2468C755DD43D08498CF11A6CB864301B7739B8569
Malicious:	false
Reputation:	low
Preview:	...........{W.H.8....F3...a,..E.Yc..i......,...Y.J2.1......R.LU....s.AY..................Oix..).NK7...KW...........`....G/..=.....3....0y..F.0......7.l.4..i)yd.Y...$..^.@....R......%o...J..gP.7..(.7.....0..V...j..#.Yi..,.<z.c..s.0..I)b...x...&....R..8..G.ji......-......\.pL...0@/....0h,...[U.DZ..7.R.....}6./...o.....:.;w.jn.1....._..<..b.{.... ..J.....9.8{.16eA...........:B#.K,N...8.T.....$.R..8...?.R.^3...n...$......K...N..p>.....<...........9.Y.......pj{.l.J..Y..W.........A.......:py.m...+..B........l..uO...v.G..q..VMw........`.<..;;.....{}0.US..O..m..v<x..%3..Tu`...U...;.~{....c.?....?...v ..-E..2......{+.?.....va8...i...8)W.....X..7... EC.h..e....D,.GA..W.Na!..T..$k..[..2..ry .1,D}LdY=..a.>\|k...-OE/.A...}./'V/..7%#..o(a.S....e!P8..UI.#.n.{).@.I....u.va.....$z#...[.BX......l.\|.U.Q.....&s\.nT..........Z...LK.~.\|."...D;U{6......T$.C..^\|%...e..!.5..T.......R........hY...~T...Z.....s...xZ\|.vcO..)+k..Up.)#O..!Qr.#ty..

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	downloaded
Size (bytes):	35168
Entropy (8bit):	7.99275807202193
Encrypted:	true
SSDEEP:	768:FlTfWbX2KT+Hid0L7lumndasuVyeLtCR4sqvrdYnN6UcepZtf/r6:LgbT+Hid0TFbeLtUGvrdCNqepbHr6
MD5:	D3B6AE9986DF244AB03412CC700335D0
SHA1:	BAAA1F9899178938F3881F09B18265E47DA806E3
SHA-256:	CA50059111D30C2E212C90805792EB543548AEF0D4941E886A778E3DCE0B9066
SHA-512:	755C57FBC9BECE435A477F76C5E8198CA8942C23BE667ACAB83A00E5CD4F54075B10AA07C7FDC10C38FC3D5C0C406C9132FEB5B67BA5BCCC57EF796054A84E7C
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........:..z.>.y..u.....N...^..S.......z~@..;...n...K........x..A]....F.8X&Em..P.s.....a.g.\|.d......._..C`.xQ...\..'...QP....?.R.{?....\|.>........E4.GRz...z.k.z.}....h..>.{[E.:.....Pu. ..e6_.o.p*.w...>...:...o.k~...~..&E._..}}.}%[. ..#......z.5M.b.....z..k.H.4...l..D.o...z..M.+../..`....?y.J4.=....u.....Z.....E.d.....{0H^...8.....9..h......d..6j......../..z..V<.`.F.xm.y..yt.J....

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57443
Category:	downloaded
Size (bytes):	16326
Entropy (8bit):	7.987374325584103
Encrypted:	false
SSDEEP:	384:GTwafLJjHlgnek9V15z6Brrwb9tYt3skOUAQC1:GTtTJjHlgneqTz658ht/eAQw
MD5:	C217AE35B8592DC9F1E680487DAD094F
SHA1:	2E642562C2BFD8968629317FF212684C7EB59193
SHA-256:	D41992E79D7BCFCC1F32597208DD99033D99C04882EAFCC8508F2FA0EE728C6B
SHA-512:	EAF3BF49BCF58A7F7C39CBF35FD75862FEE98F611536080DFC794D288274CB9D67E95D0299679F7981E110B2577A47579D3623C7F11A6AC2A0CFA56AAEA2CAB0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js
Preview:	...........}Ms#.......\.@..'F.........C)$....`.......Q.x7...}..'.}..?e#...QU]....Vo.................?........w!......=.G...P.../......8z....q._5....g..}g..31......l...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.>............4....F,&c.)n.[.pcQp...4...6...i.............CkL=....'.\..L......2.A..o.u..."p.. Xx.......'l.[w..'c/^.FP.....q.h4.R+X.x...d..M.}.Z,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j.7.....?.)..t.z.-..m.]..3y...3@.3YO.KSz]...4.b........V..+.%.[.&........l.H>G.^<..{.$"..-.i.........`qcw...`.[....as[.+.X...n..X..%,:......am."a....^o@@.`].....( (b...k..B.0.....AX.D.?...,..-<@k.;..(*..C.]...:.nn..8..s...."4.. ...J...P.n....F.3G..u..;9&.{.2.80.XB.....@.qw.:../.`.P?.+t..w6.a~..7...8k..U._......k,..o.....yQ..r.....}.E...B.r......?{...\fB....-.).Fb.;.p.N?(..P.?..p....F........)p..,`l...o@.;.x.....:..f.E....<0..#K\...K(?K/OX

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	36
Entropy (8bit):	4.503258334775644
Encrypted:	false
SSDEEP:	3:Eq62iczBr9ks:EqdiczBys
MD5:	06B313E93DD76909460FBFC0CD98CB6B
SHA1:	C4F9B2BBD840A4328F85F54873C434336A193888
SHA-256:	B4532478707B495D0BB1C21C314AEF959DD1A5E0F66E52DAD5FC332C8B697CBA
SHA-512:	EFD7E8195D9C126883C71FED3EFEDE55916848B784F8434ED2677DF5004436F7EDE9F80277CB4675C4DEB8F243B2705A3806B412FAA8842E039E9DC467C11645
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmCAmly1gHbXRIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChgKDQ3RW1FSGgQIVhgCIAEKBw1Xevf9GgA=

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113378
Category:	downloaded
Size (bytes):	20400
Entropy (8bit):	7.980289584022803
Encrypted:	false
SSDEEP:	384:8RvmaMFysnOXZ2m9zM+udO6GGUpeAU02oDGnN5EsQwWUQGGwDO8Ua:8pmm7ZFM+ObGGUIjN5PJV3PDDUa
MD5:	F0DE9A98DBDFA8C02742CE6D92FB2524
SHA1:	CDEC682AEB9E39EDCCC2374DAB26F04DB754A8B5
SHA-256:	FAF4294F27A542B0F9EA2A7CB2711529AB027CD84A5F5BADFAE752100855E6BE
SHA-512:	856FC9AB199997E69A9487372BC0083564F7115B3E0678CF1D542B9864E9A88D5FFB85697FD93538DC9439071E3BCD4B8BCCBFC610E1A45DE104D6362D8ADCD9
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css
Preview:	...........}k..6..w...R..J.H=GSI..x.9...}T.....)Q..f<...~.F.h..x..{+.-.....h..n....</v.ev......W.,.bU..rW.I...0x...C..2...6]..W_......../x.........~.z.}.\|.#x......AgO.\|XgU...4 .^'U...mP.A.].Z.U.!..Y.......:.ve.?.!..d.N...xJ...mR......0.@p...lKr/...E.-. .....\|l.4.o.i.......L.iF..T{.n....2....VEY.y=..=..T+V./.b....\....7.sH.w{.h.....!.."F.k.!.......d...mS.rh.&G.../..h&..RE"!.A/.......A....L...8.q.M...t[...R...>.6;R..^.Vu..9.[F........>A.:HT}w]......2........p......'T.^]}.^..yJ>.<..pq..h.\|..j....j.x..-...c...f...=".)..U.X'.M..l.]ZVtl\.I..}.0.~B0Y'.N...E.4.Xd..e...a.........."..9+d.&..l.$E..R.u.g.Q..w&...~I. .y..D.4;..'.."-.....b...)k.n.M...,3J.z_..&2f.h;.&.R.y..P..X.....\P.....r...B.$........<....H5.M.."'#.6mQl..mQ5.=.\...O.....^..jM..u.F..Oh.lNI..j..T..u...I..._........{.\...{..._\|..={O..z..>......x..5Q.D7?{...^...^.......o.=.z......v......z.C...Gtw...0!..M@....^...^.x..G....W...{...)..y.<c3...^>{......7._..'d__...;R.

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46591)
Category:	dropped
Size (bytes):	142367
Entropy (8bit):	5.430597817875451
Encrypted:	false
SSDEEP:	1536:PyeDWgSr6fTPRUbx3XCg/MJA5NOii5WLeVdgWLDY2Js0VgtWyTJmxyAXP3onrGGK:IgD1g/Mq5L9EveUynbBwsIccp
MD5:	CCAA31FD031C4C856EB7B986FD9F447B
SHA1:	0A809EABCDB95FA04DE5F8409B3BC994ED65CBD1
SHA-256:	3D40B4129B8B4C284908636AE46D72EA053F286FB5FE45DB78351B5B2CFC1EB9
SHA-512:	4B5B2271DB5F640FEBF13A7C0BDBD630C73530000F1593046D090585D1752E239D894614E23E801BE4C6A379406B6EF521423FA27C3865C3CD4ABB0A64823780
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 25, 2024 11:23:04.197683096 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 25, 2024 11:23:06.902041912 CEST	49735	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:06.902096033 CEST	443	49735	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:06.902180910 CEST	49735	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:06.902187109 CEST	49736	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:06.902292967 CEST	443	49736	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:06.902374029 CEST	49736	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:06.903465033 CEST	49735	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:06.903486013 CEST	443	49735	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:06.903615952 CEST	49736	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:06.903669119 CEST	443	49736	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:07.647731066 CEST	443	49735	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:07.648142099 CEST	49735	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:07.648175001 CEST	443	49735	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:07.649869919 CEST	443	49735	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:07.650098085 CEST	49735	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:07.651122093 CEST	49735	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:07.651233912 CEST	443	49735	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:07.651406050 CEST	49735	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:07.651424885 CEST	443	49735	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:07.657871008 CEST	443	49736	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:07.658165932 CEST	49736	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:07.658246040 CEST	443	49736	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:07.659936905 CEST	443	49736	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:07.660013914 CEST	49736	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:07.660311937 CEST	49736	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:07.660412073 CEST	443	49736	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:07.697482109 CEST	49735	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:07.712853909 CEST	49736	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:07.712882996 CEST	443	49736	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:07.759985924 CEST	49736	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:08.020731926 CEST	443	49735	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:08.021224022 CEST	443	49735	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:08.021279097 CEST	49735	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:08.021318913 CEST	49735	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:08.021318913 CEST	49735	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:08.021339893 CEST	443	49735	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:08.021388054 CEST	49735	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:08.830287933 CEST	49740	443	192.168.2.4	142.250.186.132
Oct 25, 2024 11:23:08.830321074 CEST	443	49740	142.250.186.132	192.168.2.4
Oct 25, 2024 11:23:08.830389023 CEST	49740	443	192.168.2.4	142.250.186.132
Oct 25, 2024 11:23:08.830615044 CEST	49740	443	192.168.2.4	142.250.186.132
Oct 25, 2024 11:23:08.830629110 CEST	443	49740	142.250.186.132	192.168.2.4
Oct 25, 2024 11:23:09.548166037 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 11:23:09.548202991 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 11:23:09.548266888 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 11:23:09.549793005 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 11:23:09.549837112 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 11:23:09.684351921 CEST	443	49740	142.250.186.132	192.168.2.4
Oct 25, 2024 11:23:09.687611103 CEST	49740	443	192.168.2.4	142.250.186.132
Oct 25, 2024 11:23:09.687639952 CEST	443	49740	142.250.186.132	192.168.2.4
Oct 25, 2024 11:23:09.689260960 CEST	443	49740	142.250.186.132	192.168.2.4
Oct 25, 2024 11:23:09.689506054 CEST	49740	443	192.168.2.4	142.250.186.132
Oct 25, 2024 11:23:09.690574884 CEST	49740	443	192.168.2.4	142.250.186.132
Oct 25, 2024 11:23:09.690812111 CEST	443	49740	142.250.186.132	192.168.2.4
Oct 25, 2024 11:23:09.745130062 CEST	49740	443	192.168.2.4	142.250.186.132
Oct 25, 2024 11:23:09.745142937 CEST	443	49740	142.250.186.132	192.168.2.4
Oct 25, 2024 11:23:09.790740013 CEST	49740	443	192.168.2.4	142.250.186.132
Oct 25, 2024 11:23:10.439230919 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 11:23:10.439306021 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 11:23:10.441682100 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 11:23:10.441695929 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 11:23:10.442034960 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 11:23:10.485063076 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 11:23:10.531343937 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 11:23:10.732069969 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 11:23:10.732151985 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 11:23:10.732234955 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 11:23:10.732312918 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 11:23:10.732314110 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 11:23:10.732347965 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 11:23:10.732371092 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 11:23:10.769841909 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 25, 2024 11:23:10.769907951 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 25, 2024 11:23:10.770001888 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 25, 2024 11:23:10.770308971 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 25, 2024 11:23:10.770318985 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 25, 2024 11:23:11.618921041 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 25, 2024 11:23:11.619152069 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 25, 2024 11:23:11.620476961 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 25, 2024 11:23:11.620486975 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 25, 2024 11:23:11.620831013 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 25, 2024 11:23:11.667562962 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 25, 2024 11:23:11.668271065 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 25, 2024 11:23:11.715370893 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 25, 2024 11:23:11.910269976 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:11.910320997 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:11.910715103 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:11.910918951 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:11.910938025 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:11.911873102 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 25, 2024 11:23:11.911933899 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 25, 2024 11:23:11.911992073 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 25, 2024 11:23:11.913568974 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 25, 2024 11:23:11.913582087 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 25, 2024 11:23:12.396825075 CEST	443	49736	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:12.397038937 CEST	443	49736	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:12.397264957 CEST	49736	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:12.966991901 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:12.967483044 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:12.967504978 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:12.969268084 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:12.969346046 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:12.970735073 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:12.970819950 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:12.971208096 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:12.971218109 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.011096954 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:13.157203913 CEST	49736	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:13.157268047 CEST	443	49736	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:13.202333927 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.256320953 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:13.321398973 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.321427107 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.321466923 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.321484089 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:13.321487904 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.321511030 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.321528912 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:13.321540117 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.321547985 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:13.321567059 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.321572065 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:13.321609974 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:13.322942972 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.323000908 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.323024035 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:13.323040009 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.323064089 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:13.323086977 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:13.439841986 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.439901114 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.439934015 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:13.439944029 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.439960003 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:13.439994097 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:13.440010071 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.441389084 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.441451073 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:13.441459894 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.441490889 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.441546917 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:13.441555977 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.442945957 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.442986965 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.443011045 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:13.443021059 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.443053007 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:13.480858088 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.480909109 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.480933905 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:13.480945110 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.481009960 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:13.559937954 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.560005903 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.560030937 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:13.560040951 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.560090065 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:13.561292887 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.561352968 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.561356068 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:13.561392069 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:13.561402082 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.561427116 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:13.561455011 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:13.562275887 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.562335968 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.562370062 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:13.562386990 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.562417030 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:13.562556982 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.562608004 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:13.588069916 CEST	49747	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:13.588087082 CEST	443	49747	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.692929983 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:13.692955017 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:13.693010092 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:13.693367958 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:13.693382025 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:14.732081890 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:14.734476089 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:14.734489918 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:14.738034964 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:14.738152981 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:14.738811016 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:14.738889933 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:14.739147902 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:14.739162922 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:14.786904097 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:15.170146942 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:15.177095890 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:15.177120924 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:15.177164078 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:15.177175999 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:15.177192926 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:15.177222967 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:15.177222967 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:15.177262068 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:15.177268028 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:15.177318096 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:15.192894936 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:15.192951918 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:15.192970991 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:15.192985058 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:15.193030119 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:15.193030119 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:15.230113029 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:15.230192900 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:15.230217934 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:15.230289936 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:15.245978117 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:15.246031046 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:15.246129990 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:15.246129990 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:15.246149063 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:15.246606112 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:15.246613026 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:15.267076969 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:15.267131090 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:15.267169952 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:15.267178059 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:15.267240047 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:15.282866955 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:15.282911062 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:15.283087969 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:15.283087969 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:15.283099890 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:15.294528961 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:15.294574976 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:15.294723988 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:15.307265997 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:15.307303905 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:15.313343048 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:15.313359022 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:15.313416958 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:15.313821077 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:15.313832998 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:15.314824104 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:15.314856052 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:15.314934015 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:15.315335989 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:15.315356970 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:15.334464073 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:15.334568977 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:15.334590912 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:15.334630013 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:15.334630966 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:15.334690094 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:15.334690094 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:15.334697962 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:15.334774017 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:15.350552082 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:15.350599051 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:15.350646019 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:15.350653887 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:15.350718021 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:15.350718021 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:15.361212969 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:15.361274958 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:15.361324072 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:15.361337900 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:15.361349106 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:15.361424923 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:15.361488104 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:15.362035036 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 25, 2024 11:23:15.362051010 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 25, 2024 11:23:16.048430920 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.069895983 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.072712898 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.101794004 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.117832899 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.118029118 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.151508093 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.151530027 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.151838064 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.151846886 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.151947021 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.151952982 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.153639078 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.153728008 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.155498028 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.155529976 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.155582905 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.155895948 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.155971050 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.159751892 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.159864902 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.159959078 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.160171032 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.160650969 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.160851002 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.161233902 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.161242962 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.162162066 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.162169933 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.162750959 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.162758112 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.209379911 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.209379911 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.211422920 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.312728882 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.312761068 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.312771082 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.312789917 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.312799931 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.312807083 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.312829018 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.312870026 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.312908888 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.312936068 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.317307949 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.317394972 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.317416906 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.317456007 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.317475080 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.317477942 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.317493916 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.317519903 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.317519903 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.317523003 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.317559004 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.317580938 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.317635059 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.317785978 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.317889929 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.404776096 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.404870987 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.404885054 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.405658960 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.408896923 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.408957005 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.408977985 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.409012079 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.409013987 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.409040928 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.409050941 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.409073114 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.409106970 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.409126043 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.409163952 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.409188986 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.409216881 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.410662889 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.410710096 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.410739899 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.410744905 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.410767078 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.410782099 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.410795927 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.410806894 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.410823107 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.463409901 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.526719093 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.526761055 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.526820898 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.526823997 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.526865005 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.526887894 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.526947975 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.526947975 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.527601004 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.527651072 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.527713060 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.527729034 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.527755022 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.527865887 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.529309034 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.529354095 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.529396057 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.529409885 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.529436111 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.529457092 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.592221022 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.592283010 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.592308998 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.592361927 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.592391968 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.592416048 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.643923998 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.644047022 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.644059896 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.644092083 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.644123077 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.644146919 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.644709110 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.644776106 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.644797087 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.644890070 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.647890091 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.760140896 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.800064087 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.800100088 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.807298899 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.807320118 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:16.832679987 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:16.832701921 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:17.051008940 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:17.051057100 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:17.051126957 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:17.051409960 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:17.051424026 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:17.052253962 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:17.052333117 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:17.052411079 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:17.052702904 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:17.052730083 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:17.206492901 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:17.206537962 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:17.206640005 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:17.206962109 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:17.207037926 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:17.207113981 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:17.207185030 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:17.207199097 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:17.207540035 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:17.207575083 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:17.332379103 CEST	49672	443	192.168.2.4	173.222.162.32
Oct 25, 2024 11:23:17.332412958 CEST	443	49672	173.222.162.32	192.168.2.4
Oct 25, 2024 11:23:17.795491934 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:17.795891047 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:17.795950890 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:17.797403097 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:17.797501087 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:17.800044060 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:17.800158978 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:17.800446033 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:17.800466061 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:17.804694891 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:17.807849884 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:17.807868958 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:17.809448957 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:17.809509993 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:17.810225964 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:17.810302019 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:17.810524940 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:17.810530901 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:17.841001034 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:17.866017103 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:17.929687977 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:17.929980993 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:17.930021048 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:17.931473017 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:17.931564093 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:17.931989908 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:17.932080984 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:17.932122946 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:17.958209038 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:17.958416939 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:17.958445072 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:17.959902048 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:17.959964991 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:17.960426092 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:17.960509062 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:17.960778952 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:17.960793018 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:17.975194931 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:17.975255966 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.006438971 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.022073984 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.040657043 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.040715933 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.040738106 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.040781975 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.040785074 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.040812016 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.040832043 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.040833950 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.040879011 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.040904045 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.040950060 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.041004896 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.041014910 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.041100979 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.041160107 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.042140961 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.042154074 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.049361944 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.049417973 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.049438000 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.049455881 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.049485922 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.049514055 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.049531937 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.049535036 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.049563885 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.049565077 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.049597979 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.049612999 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.051127911 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.051197052 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.051294088 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.051796913 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.051829100 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.060393095 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.060439110 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.060477018 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.060503960 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.060530901 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.060548067 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.168836117 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.168868065 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.168879986 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.168900013 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.168910027 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.168914080 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.168953896 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.169014931 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.169070005 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.169101000 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.169157028 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.169224977 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.169426918 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.169477940 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.169552088 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.169553041 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.169615030 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.169676065 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.170006990 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.170039892 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.179335117 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.179387093 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.179434061 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.179502010 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.179541111 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.179563999 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.181992054 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.182044029 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.182095051 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.182109118 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.182153940 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.182173967 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.204149961 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.204212904 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.204233885 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.204288960 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.204297066 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.204334021 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.204340935 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.204361916 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.204372883 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.204400063 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.204433918 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.211381912 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.211441040 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.211476088 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.211513042 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.211546898 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.211564064 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.287492037 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.287604094 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.287821054 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.287892103 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.287950039 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.287995100 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.288028002 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.288063049 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.288096905 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.288115978 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.288286924 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.288355112 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.288369894 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.288480043 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.288539886 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.289520979 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.289552927 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.294765949 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.294814110 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.294951916 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.295144081 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.295156956 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.323873043 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.323905945 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.323971987 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.323993921 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.324028969 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.324050903 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.330153942 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.330178022 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.330224037 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.330238104 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.330281973 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.332030058 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.332052946 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.332108021 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.332119942 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.332149982 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.332173109 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.344764948 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.344815016 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.345139980 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.345349073 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.345366001 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.345886946 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.345927954 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.345994949 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.347119093 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.347134113 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.359067917 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.359103918 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.359246016 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.359565020 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.359576941 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.370829105 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.370867014 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.370914936 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.370934010 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.370963097 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.370990992 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.443784952 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.443820000 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.443878889 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.443893909 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.443932056 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.443954945 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.444725037 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.444797039 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.444804907 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.444819927 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.444855928 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.445318937 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.445329905 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.669994116 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.670023918 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.670341969 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.670496941 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.670509100 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.785145044 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.785423040 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.785497904 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.785964966 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.786385059 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.786478996 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.786492109 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:18.827369928 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:18.839155912 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.027057886 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.027087927 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.027098894 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.027116060 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.027127028 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.027137041 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.027199030 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.027293921 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.027345896 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.027368069 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.027368069 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.027406931 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.042303085 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.067578077 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.088351011 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.095946074 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.101614952 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.124238014 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.148755074 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.148753881 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.169102907 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.169130087 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.169714928 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.173037052 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.173068047 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.174364090 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.188944101 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.189152002 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.205837965 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.205862999 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.205929041 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.205960989 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.207360029 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.209894896 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.209990978 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.222898960 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.226212025 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.226349115 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.227385044 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.227715969 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.228266001 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.228383064 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.229825020 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.229991913 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.230424881 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.230453968 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.230803967 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.271354914 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.271377087 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.271425009 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.276832104 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.309752941 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.309828997 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.368495941 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.368666887 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.368736982 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.370146036 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.370171070 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.377260923 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.377332926 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.377408981 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.377589941 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.377604008 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.390577078 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.391067982 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.391124010 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.391144991 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.391204119 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.391262054 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.404828072 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.404851913 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.408983946 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.409424067 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.409439087 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.410851002 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.411076069 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.411886930 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.411971092 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.412197113 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.412204027 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.418651104 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.418751955 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.418848038 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.419011116 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.419047117 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.463037014 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.478620052 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.478652000 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.478663921 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.478709936 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.478713036 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.478732109 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.478744984 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.478777885 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.478809118 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.478809118 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.478838921 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.478861094 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.481065035 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.481112957 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.481137991 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.481153011 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.481200933 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.481245041 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.481254101 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.481286049 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.481312990 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.481451988 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.481508970 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.482007027 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.482042074 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.482065916 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.482094049 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.488632917 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.488662004 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.488743067 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.488986015 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.489000082 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.515109062 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.515160084 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.515180111 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.515221119 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.515222073 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.515239000 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.515255928 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.515268087 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.515280962 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.515292883 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.515333891 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.515333891 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.517477989 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.517522097 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.517556906 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.517570972 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.517637014 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.517673016 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.539776087 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.540015936 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.540071964 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.541162014 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.541177034 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.546185017 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.546250105 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.546334982 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.546479940 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.546505928 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.601777077 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.601839066 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.601865053 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.601882935 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.601923943 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.601944923 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.689058065 CEST	443	49740	142.250.186.132	192.168.2.4
Oct 25, 2024 11:23:19.689132929 CEST	443	49740	142.250.186.132	192.168.2.4
Oct 25, 2024 11:23:19.689174891 CEST	49740	443	192.168.2.4	142.250.186.132
Oct 25, 2024 11:23:19.720649004 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.720683098 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.720712900 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.720741034 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.720757961 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.720788956 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.872838974 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.872874022 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.872906923 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.872929096 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.872957945 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.872982025 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.958517075 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.958553076 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.958601952 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:19.958626032 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:19.958678961 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.094640017 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.094892979 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.094907045 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.095376968 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.095999956 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.096084118 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.096259117 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.111103058 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.111138105 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.111182928 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.111211061 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.111251116 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.111270905 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.111502886 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.111548901 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.111557961 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.111591101 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.111632109 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.112364054 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.112380981 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.139327049 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.155766010 CEST	49740	443	192.168.2.4	142.250.186.132
Oct 25, 2024 11:23:20.155790091 CEST	443	49740	142.250.186.132	192.168.2.4
Oct 25, 2024 11:23:20.188922882 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.189502001 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.189538002 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.189842939 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.190367937 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.190428972 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.190515041 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.222177029 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.222259998 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.222313881 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.223196030 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.223210096 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.231333017 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.279155970 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.279397011 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.279433012 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.280848026 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.280915022 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.281326056 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.281404972 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.281501055 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.281511068 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.325839043 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.326469898 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.326498985 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.326499939 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.326514959 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.326549053 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.326632023 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.327972889 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.328299999 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.329843998 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.329847097 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.329868078 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.329936028 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.330882072 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.330889940 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.335015059 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.381870031 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.466331005 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.466511011 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.466593981 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.467825890 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.467840910 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.519010067 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.519042015 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.519051075 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.519093990 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.519119024 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.519124031 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.519130945 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.519157887 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.519181013 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.519412994 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.527952909 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.527983904 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.528089046 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.528089046 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.528104067 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.528830051 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.528908968 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:20.528927088 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.531434059 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.531810999 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:20.531826973 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:22.111403942 CEST	49723	80	192.168.2.4	199.232.210.172
Oct 25, 2024 11:23:22.119096041 CEST	80	49723	199.232.210.172	192.168.2.4
Oct 25, 2024 11:23:22.119143963 CEST	49723	80	192.168.2.4	199.232.210.172
Oct 25, 2024 11:23:57.630640030 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:57.630681038 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:57.630753994 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:57.631021976 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:57.631035089 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.383070946 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.383148909 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.386702061 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.386719942 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.387053013 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.394254923 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.435342073 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.612389088 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.612514019 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.612590075 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.612600088 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.612690926 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.612732887 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.612752914 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.643970966 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.644026041 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.644069910 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.644103050 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.644125938 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.644146919 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.730973005 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.731030941 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.731146097 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.731147051 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.731215954 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.731378078 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.759757042 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.759804964 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.759848118 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.759915113 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.759957075 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.760077953 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.762665987 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.762742996 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.762756109 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.762778997 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.762808084 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.762828112 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.800462961 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.800543070 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.800550938 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.800571918 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.800604105 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.800625086 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.847543955 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.847600937 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.847718954 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.847718954 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.847786903 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.847851992 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.875683069 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.875729084 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.875773907 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.875835896 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.875875950 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.875897884 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.876981974 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.877022982 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.877058983 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.877072096 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.877096891 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.877116919 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.878539085 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.878587961 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.878621101 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.878633022 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.878655910 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.878680944 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.880177021 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.880222082 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.880254984 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.880266905 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.880294085 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.880311012 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.881531000 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.881572962 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.881618977 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.881630898 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.881658077 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.881714106 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.963296890 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.963356018 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.963390112 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.963413000 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.963435888 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.963460922 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.963493109 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.963630915 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.963680029 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.963680029 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.963772058 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.963773012 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:58.963819027 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:58.963851929 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.006803989 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.006900072 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.006988049 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.008086920 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.008163929 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.008316040 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.008970022 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.009006977 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.009427071 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.009462118 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.010241032 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.010339022 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.010423899 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.010705948 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.010735989 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.011792898 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.011828899 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.011929035 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.012408972 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.012434006 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.012496948 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.012619019 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.012643099 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.012725115 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.012744904 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.752938032 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.753421068 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.753500938 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.753880978 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.753894091 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.754353046 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.755023956 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.755023956 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.755080938 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.755110025 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.755232096 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.755626917 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.755712986 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.755815029 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.755827904 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.758977890 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.759576082 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.759576082 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.759629965 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.759686947 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.768419027 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.768754959 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.768788099 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.769109011 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.769119978 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.885833025 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.885862112 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.885955095 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.885977983 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.886151075 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.886151075 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.886208057 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.886224985 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.886400938 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.886460066 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.886584997 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.886626959 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.886811972 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.886868954 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.886910915 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.886979103 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.886986017 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.887018919 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.887026072 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.887156963 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.887670994 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.887670994 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.887713909 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.887742043 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.889662027 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.889666080 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.889704943 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.889717102 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.889802933 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.889807940 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.890012026 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.890017986 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.890028954 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.890053034 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.890619040 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.890703917 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.890872955 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.890872955 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.890950918 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.906045914 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.908269882 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.908358097 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.908358097 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.908423901 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.908431053 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.910113096 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.910144091 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.910259962 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.910331964 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.910345078 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.926497936 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.926687002 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.926834106 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.926978111 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.926978111 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.927031994 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.927057028 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.931749105 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.931818008 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 25, 2024 11:23:59.932132006 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.932362080 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:23:59.932393074 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.615010977 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.615477085 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.615540028 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.616008043 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.616022110 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.628798962 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.629160881 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.629204035 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.629509926 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.629523039 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.641506910 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.641997099 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.642035961 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.642586946 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.642601013 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.675941944 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.676310062 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.676359892 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.676714897 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.676726103 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.737310886 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.737695932 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.737759113 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.738094091 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.738107920 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.742685080 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.746310949 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.746380091 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.746531010 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.746556997 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.746582985 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.746591091 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.750152111 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.750242949 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.750330925 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.750503063 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.750536919 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.761461020 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.761603117 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.761651993 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.761691093 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.761710882 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.761729956 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.761737108 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.764058113 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.764100075 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.764185905 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.764354944 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.764374018 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.773595095 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.773746967 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.773921013 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.774101019 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.774101019 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.774135113 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.774156094 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.775794029 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.775815964 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.775964975 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.776089907 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.776103020 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.808583975 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.808660984 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.808715105 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.808881998 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.808900118 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.808919907 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.808926105 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.811465979 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.811503887 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.811784983 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.811914921 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.811934948 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.869714975 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.869854927 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.870012045 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.870058060 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.870058060 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.870079994 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.870094061 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.872389078 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.872426033 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:00.872493029 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.872665882 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:00.872685909 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.491569996 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.491996050 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.492053986 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.492580891 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.492594004 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.500354052 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.500713110 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.500798941 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.501049042 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.501064062 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.519345045 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.519799948 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.519823074 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.520168066 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.520178080 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.545433998 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.545763969 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.545780897 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.546122074 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.546130896 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.610390902 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.610744953 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.610786915 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.611097097 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.611104012 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.620583057 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.620723963 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.620805979 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.620806932 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.620949030 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.620979071 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.623102903 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.623151064 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.623214006 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.623339891 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.623352051 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.631300926 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.631531000 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.631609917 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.631769896 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.631808043 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.631850004 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.631865025 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.633491993 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.633516073 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.633701086 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.633824110 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.633840084 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.656491041 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.657205105 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.657264948 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.657324076 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.657337904 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.657350063 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.657356024 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.659379005 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.659419060 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.659499884 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.659650087 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.659666061 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.680365086 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.680510044 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.680738926 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.680896997 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.680897951 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.680918932 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.680939913 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.688749075 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.688853025 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.688930035 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.689081907 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.689114094 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.740565062 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.740751982 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.740955114 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.741034031 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.741034031 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.741080046 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.741111040 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.743287086 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.743320942 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:01.743545055 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.743545055 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:01.743577003 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.360796928 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.361355066 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.361413002 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.361646891 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.361656904 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.376898050 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.377332926 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.377401114 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.377754927 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.377774954 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.387437105 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.387995958 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.388056993 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.388284922 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.388300896 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.435105085 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.435491085 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.435537100 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.435869932 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.435884953 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.489578962 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.489727974 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.489842892 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.489842892 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.489919901 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.489958048 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.491086006 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.491527081 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.491543055 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.492077112 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.492080927 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.493069887 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.493133068 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.493242025 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.493381977 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.493398905 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.508152962 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.508199930 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.508361101 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.508464098 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.508464098 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.508507967 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.508536100 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.510538101 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.510562897 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.510622978 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.510755062 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.510766983 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.515402079 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.516168118 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.516242027 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.516283035 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.516283989 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.516304970 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.516316891 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.518939018 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.519030094 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.519095898 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.519217014 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.519251108 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.586147070 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.586191893 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.586261034 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.586368084 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.586406946 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.586457968 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.586473942 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.588361979 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.588404894 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.588531017 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.588654995 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.588675022 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.624402046 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.625253916 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.625332117 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.625360966 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.625370979 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.625448942 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.625453949 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.627865076 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.627943039 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:02.628025055 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.628160000 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:02.628182888 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.229515076 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.229994059 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.230017900 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.230595112 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.230607033 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.241558075 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.242121935 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.242144108 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.242620945 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.242625952 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.253546000 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.253916979 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.253946066 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.254410028 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.254416943 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.335942030 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.336513996 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.336587906 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.336999893 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.337013006 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.358963013 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.359646082 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.359723091 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.359786034 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.359821081 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.359847069 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.359862089 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.362483025 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.362545013 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.362622023 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.362803936 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.362828016 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.387909889 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.388391018 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.388458014 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.388523102 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.388545036 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.388557911 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.388565063 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.390681982 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.390703917 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.390851974 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.391166925 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.391177893 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.400248051 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.400685072 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.400706053 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.401245117 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.401252031 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.422530890 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.422791958 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.422900915 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.422935009 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.422945023 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.422955036 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.422962904 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.425412893 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.425479889 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.425554037 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.425692081 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.425718069 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.471548080 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.471595049 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.471659899 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.471822977 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.471822977 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.471869946 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.471898079 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.474344015 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.474359035 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.474492073 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.474647045 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.474658012 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.546788931 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.546936989 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.546997070 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.547132015 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.547164917 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.547179937 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.547188044 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.550138950 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.550235033 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:03.550318003 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.550487041 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:03.550538063 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.088829994 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.093234062 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.093311071 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.093684912 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.093699932 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.144169092 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.144628048 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.144644976 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.145148039 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.145153046 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.164526939 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.164906979 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.164971113 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.165523052 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.165537119 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.216567039 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.216949940 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.216969013 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.217005968 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.217406988 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.217439890 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.217443943 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.217500925 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.217551947 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.217572927 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.217590094 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.217597008 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.219981909 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.220024109 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.220107079 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.220248938 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.220262051 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.275408983 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.275572062 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.275644064 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.275723934 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.275733948 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.275787115 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.275793076 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.278400898 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.278460026 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.278605938 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.278786898 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.278810978 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.288957119 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.289378881 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.289453983 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.289808989 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.289823055 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.295728922 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.295950890 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.296009064 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.296058893 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.296058893 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.296092033 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.296118021 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.298113108 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.298170090 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.298253059 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.298382044 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.298413992 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.348722935 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.349289894 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.349337101 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.349385023 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.349385023 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.349401951 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.349411011 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.353434086 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.353497028 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.354000092 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.354175091 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.354201078 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.418782949 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.418951988 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.419135094 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.419341087 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.419356108 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.419388056 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.419394970 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.421686888 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.421775103 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.421950102 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.423814058 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.423850060 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.969894886 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.975894928 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.975894928 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:04.975955963 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:04.975999117 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.007797003 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.008595943 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.008646965 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.010811090 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.010833025 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.048634052 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.049469948 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.049546957 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.051811934 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.051826954 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.088151932 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.089133024 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.089133024 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.089185953 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.089202881 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.104698896 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.104886055 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.111356974 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.111397028 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.117676973 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.136653900 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.136823893 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.138427973 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.147818089 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.147852898 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.147897005 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.147913933 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.147991896 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.147993088 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.148036003 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.148066998 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.176748037 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.180479050 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.180560112 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.180834055 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.201009989 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.201080084 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.201580048 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.201595068 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.201596022 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.201611042 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.201632023 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.201643944 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.203831911 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.203893900 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.204083920 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.204083920 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.204145908 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.205801010 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.205805063 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.205888987 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.205893993 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.206613064 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.206614971 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.206798077 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.206801891 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.206832886 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.206832886 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.220241070 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.220405102 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.220658064 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.220659018 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.220702887 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.220721960 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.238751888 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.238797903 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.244151115 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.244151115 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.244209051 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.330987930 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.331221104 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.338083982 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.340607882 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.340607882 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.340651035 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.340684891 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.342829943 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.342889071 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.343074083 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.343075037 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.343125105 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.960076094 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.960607052 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.960669994 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.961051941 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.961066008 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.963213921 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.963607073 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.963666916 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.963993073 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.964006901 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.967191935 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.967534065 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.967562914 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:05.967907906 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:05.967916012 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:06.015651941 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:06.016067982 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:06.016129971 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:06.016433001 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:06.016448021 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:06.362535954 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:06.362617970 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:06.362692118 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:06.362829924 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:06.362972975 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:06.362973928 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:06.363002062 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:06.363020897 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:06.363035917 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:06.363051891 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:06.363068104 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:06.363069057 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:06.363092899 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:06.363231897 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:06.363231897 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:06.363274097 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:06.363300085 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:06.363362074 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:06.363517046 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:06.363584995 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:06.364273071 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:06.364293098 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:06.364828110 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:06.364846945 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:06.364861012 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:06.364866972 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:06.367786884 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:06.367813110 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:06.367878914 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:06.368735075 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:06.368763924 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:06.368823051 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:06.368887901 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:06.368985891 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:06.369046926 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:06.369118929 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:06.369143963 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:06.369174957 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:06.369268894 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:06.369291067 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:06.369303942 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:06.369318962 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:06.369766951 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:06.369791985 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:06.370412111 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:06.370423079 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:06.370533943 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:06.370556116 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:06.370655060 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:06.370872974 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:06.370886087 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:06.501239061 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:06.501369953 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:06.501496077 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:06.521286011 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:06.521322966 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:06.521447897 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:06.521466017 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:06.528362989 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:06.528423071 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:06.528542042 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:06.528844118 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:06.528862953 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.106609106 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.107618093 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.107656002 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.109682083 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.109688997 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.118772030 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.119153976 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.119168997 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.119870901 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.119874001 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.122955084 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.123497009 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.123507023 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.124093056 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.124099016 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.235677958 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.235876083 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.235994101 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.236569881 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.236601114 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.236660957 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.236677885 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.239722013 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.239820004 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.239912987 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.240046024 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.240067959 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.250307083 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.250482082 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.250592947 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.250689030 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.250703096 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.254658937 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.254849911 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.254936934 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.255091906 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.255091906 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.255096912 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.255105019 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.257673025 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.257760048 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.257853985 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.258364916 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.258399010 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.261641979 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.261689901 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.261769056 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.261909008 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.261940002 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.280388117 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.280894995 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.280949116 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.281616926 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.281630039 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.306189060 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.306696892 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.306756020 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.307589054 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.307604074 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.411503077 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.411705971 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.411773920 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.411979914 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.411979914 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.412012100 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.412034035 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.416213036 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.416304111 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.416416883 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.416668892 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.416703939 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.435607910 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.435678959 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.435880899 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.435882092 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.435882092 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.440423012 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.440514088 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.440612078 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.440720081 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.440746069 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.742990971 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.743065119 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.978954077 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.979532003 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.979595900 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.980065107 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.980081081 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.994930983 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.996984959 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.997020006 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.997394085 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.997643948 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.997661114 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.998557091 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.998624086 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:07.998928070 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:07.998941898 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.109333038 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.109472036 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.109570026 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.110024929 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.110090017 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.110129118 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.110145092 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.114424944 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.114511967 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.114599943 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.114716053 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.114736080 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.124792099 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.124927044 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.125040054 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.125149965 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.125149965 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.125169039 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.125190020 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.127228975 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.127403021 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.127479076 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.129041910 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.129057884 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.129059076 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.129098892 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.129122972 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.129127979 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.129215956 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.130558968 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.130594015 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.133163929 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.133198977 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.133404970 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.133832932 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.133855104 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.151660919 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.152138948 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.152163982 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.152861118 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.152874947 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.236835957 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.238018036 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.238044977 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.239437103 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.239448071 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.281500101 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.281759977 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.281896114 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.282845974 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.282879114 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.288650036 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.288747072 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.289170027 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.289608955 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.289644957 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.373111010 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.373271942 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.373424053 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.373725891 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.373760939 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.373794079 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.373811007 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.377370119 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.377413034 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.377605915 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.377970934 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.377985001 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.853389978 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.854074955 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.854129076 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.855460882 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.855490923 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.862617016 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.863436937 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.863493919 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.865108967 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.865123034 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.875619888 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.876327038 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.876358032 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.876769066 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.876779079 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.880450964 CEST	49838	443	192.168.2.4	142.250.186.68
Oct 25, 2024 11:24:08.880511045 CEST	443	49838	142.250.186.68	192.168.2.4
Oct 25, 2024 11:24:08.880584955 CEST	49838	443	192.168.2.4	142.250.186.68
Oct 25, 2024 11:24:08.880872965 CEST	49838	443	192.168.2.4	142.250.186.68
Oct 25, 2024 11:24:08.880902052 CEST	443	49838	142.250.186.68	192.168.2.4
Oct 25, 2024 11:24:08.984756947 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.985574007 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.985642910 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.985729933 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.985729933 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.985774040 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.985800028 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.991718054 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.991805077 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.991874933 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.992268085 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.992301941 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.992314100 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.992383957 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.992438078 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.992500067 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.992500067 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.992533922 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.992558956 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.997781038 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.997836113 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:08.997899055 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.998269081 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:08.998295069 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.005508900 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.005680084 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.005744934 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:09.005839109 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:09.005839109 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:09.005858898 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.005882025 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.010061026 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:09.010087967 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.010154963 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:09.010515928 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:09.010544062 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.021143913 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.021723032 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:09.021779060 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.022747993 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:09.022762060 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.128765106 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.129839897 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:09.129869938 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.131479025 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:09.131499052 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.149893045 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.150353909 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.150417089 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:09.150907040 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:09.150907040 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:09.150944948 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.150969982 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.207159042 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:09.207201958 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.207258940 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:09.207412958 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:09.207427979 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.259521961 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.259705067 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.259795904 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:09.259795904 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:09.259879112 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:09.259900093 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.261815071 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:09.261852980 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.262094975 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:09.262094975 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:09.262151003 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.724009991 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.724553108 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:09.724616051 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.725373983 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:09.725388050 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.741401911 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.742245913 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:09.742306948 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.743813038 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:09.743829012 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.757785082 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.758327961 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:09.758387089 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.758807898 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:09.758821964 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.764705896 CEST	443	49838	142.250.186.68	192.168.2.4
Oct 25, 2024 11:24:09.765244007 CEST	49838	443	192.168.2.4	142.250.186.68
Oct 25, 2024 11:24:09.765261889 CEST	443	49838	142.250.186.68	192.168.2.4
Oct 25, 2024 11:24:09.766351938 CEST	443	49838	142.250.186.68	192.168.2.4
Oct 25, 2024 11:24:09.766985893 CEST	49838	443	192.168.2.4	142.250.186.68
Oct 25, 2024 11:24:09.767167091 CEST	443	49838	142.250.186.68	192.168.2.4
Oct 25, 2024 11:24:09.819106102 CEST	49838	443	192.168.2.4	142.250.186.68
Oct 25, 2024 11:24:09.993113995 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.993185997 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.993326902 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.993422031 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.993474960 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:09.993530989 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.993587971 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:09.993706942 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:09.993844986 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.016460896 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.016460896 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.016505003 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.016520977 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.018203974 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.018245935 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.018292904 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.018311024 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.019709110 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.019771099 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.019813061 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.019829988 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.022814989 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.022855043 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.023930073 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.024007082 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.024044991 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.024180889 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.024456978 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.024481058 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.025824070 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.025857925 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.026705980 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.026734114 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.027182102 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.027611971 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.027631044 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.121017933 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.129684925 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.129755020 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.130439997 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.130453110 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.131303072 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.131930113 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.132008076 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.133817911 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.133831978 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.151819944 CEST	49724	80	192.168.2.4	199.232.210.172
Oct 25, 2024 11:24:10.157896042 CEST	80	49724	199.232.210.172	192.168.2.4
Oct 25, 2024 11:24:10.158390999 CEST	49724	80	192.168.2.4	199.232.210.172
Oct 25, 2024 11:24:10.254492044 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.254590034 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.254766941 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.254942894 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.254942894 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.254988909 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.255023003 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.259823084 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.259915113 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.263020992 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.263020992 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.263093948 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.274987936 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.275229931 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.277878046 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.277878046 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.278044939 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.278062105 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.280422926 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.280487061 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.284070969 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.284523964 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.284559011 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.750113010 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.750552893 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.750593901 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.751013994 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.751025915 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.795950890 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.796295881 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.796319008 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.796753883 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.796758890 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.806462049 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.806806087 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.806813955 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.807178020 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.807183027 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.879261971 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.879350901 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.879400015 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.879506111 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.879533052 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.879570007 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.879576921 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.882659912 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.882698059 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.882771015 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.882971048 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.882987022 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.925174952 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.925308943 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.925365925 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.925405025 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.925405025 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.925426006 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.925437927 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.927408934 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.927440882 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.927500963 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.927668095 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.927680969 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.943475962 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.943602085 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.943686008 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.943871975 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.943871975 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.943892002 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.943912983 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.946090937 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.946129084 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:10.946351051 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.946352005 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:10.946379900 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.029649019 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.030441999 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.045953989 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.046025038 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.046744108 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.046760082 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.047267914 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.047301054 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.047663927 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.047677040 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.173171043 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.173329115 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.173397064 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.173454046 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.173454046 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.173491955 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.173515081 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.173970938 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.174276114 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.174345016 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.174345016 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.174388885 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.174417973 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.176198006 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.176285982 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.176357031 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.176620960 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.176655054 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.176711082 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.176754951 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.176817894 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.176918983 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.176929951 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.610738039 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.611232996 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.611249924 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.611743927 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.611749887 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.674757004 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.675167084 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.675199032 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.675658941 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.675666094 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.679671049 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.681885958 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.681896925 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.682286978 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.682295084 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.743695021 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.743908882 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.743956089 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.744159937 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.744159937 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.744179964 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.744196892 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.746758938 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.746845961 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.747179985 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.747390985 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.747411013 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.803976059 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.804130077 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.804200888 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.804271936 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.804312944 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.804342985 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.804358006 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.806634903 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.806679010 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.806750059 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.806880951 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.806898117 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.810976028 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.811145067 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.811326981 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.811352015 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.811362982 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.811371088 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.811376095 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.813498020 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.813513994 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.813580036 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.813710928 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.813715935 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.918462992 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.918838024 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.918858051 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.919296980 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.919310093 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.921561003 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.921871901 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.921922922 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:11.922219992 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:11.922249079 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.053011894 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.053188086 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.053359985 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.053448915 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.053448915 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.053488016 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.053529978 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.054184914 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.054316044 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.054363012 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.055152893 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.055172920 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.055186033 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.055192947 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.063211918 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.063267946 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.063332081 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.063355923 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.063385963 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.063404083 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.063479900 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.063493967 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.063658953 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.063673973 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.614552021 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.615021944 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.615044117 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.615459919 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.615467072 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.616993904 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.617305040 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.617322922 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.617801905 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.617806911 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.621551037 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.621836901 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.621870041 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.622200966 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.622212887 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.744906902 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.745100975 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.747833014 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.748590946 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.748608112 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.748620033 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.748626947 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.748781919 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.748861074 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.748912096 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.749042034 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.749048948 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.749058962 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.749064922 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.751389027 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.751449108 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.751483917 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.751514912 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.751540899 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.751611948 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.751694918 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.751710892 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.751773119 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.751786947 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.757966042 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.758163929 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.758224010 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.758270979 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.758271933 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.758295059 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.758316040 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.760186911 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.760274887 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.760344028 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.760519028 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.760552883 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.796560049 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.796912909 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.796926975 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.797378063 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.797384024 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.807224989 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.807554960 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.807571888 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.807938099 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.807948112 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.927643061 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.927706003 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.927815914 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.927884102 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.927898884 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.927911043 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.927917957 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.930290937 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.930314064 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.930408955 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.930577993 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.930593967 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.937462091 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.937675953 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.937736034 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.937781096 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.937782049 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.937803030 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.937824965 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.939802885 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.939846039 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:12.939914942 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.940058947 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:12.940084934 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.472313881 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.472804070 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.472816944 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.473275900 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.473279953 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.492654085 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.493006945 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.493056059 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.493381023 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.493392944 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.506402969 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.506721973 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.506773949 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.507071972 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.507083893 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.600294113 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.600348949 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.600423098 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.600545883 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.600545883 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.600557089 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.600564957 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.603252888 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.603328943 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.603430033 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.603580952 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.603595972 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.625073910 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.625096083 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.625148058 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.625200033 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.625252008 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.625283957 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.625314951 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.625329018 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.627180099 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.627263069 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.627378941 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.627485037 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.627507925 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.639112949 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.640079975 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.640140057 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.640191078 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.640191078 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.640221119 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.640244961 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.642024994 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.642055988 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.642173052 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.642297029 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.642322063 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.662267923 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.662628889 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.662636995 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.663074970 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.663079023 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.688280106 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.688596010 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.688616991 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.688963890 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.688976049 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.801153898 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.801177979 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.801363945 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.801371098 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.801471949 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.801480055 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.801517963 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.801628113 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.801662922 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.801755905 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.804223061 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.804302931 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.804388046 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.804516077 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.804550886 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.820147038 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.820204020 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.820266008 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.820291042 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.820334911 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.820339918 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.820383072 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.820523024 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.820547104 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.820570946 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.820584059 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.822793007 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.822873116 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:13.822951078 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.823106050 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:13.823143959 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.336855888 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.337297916 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.337328911 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.337804079 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.337815046 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.372227907 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.372632980 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.372694969 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.373008013 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.373023987 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.385473013 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.385775089 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.385791063 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.386110067 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.386121035 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.467225075 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.467246056 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.467307091 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.467329025 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.467381001 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.467555046 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.467586994 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.467612028 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.467627048 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.470149994 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.470207930 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.470412970 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.470515966 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.470527887 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.503542900 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.503688097 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.503762960 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.503825903 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.503825903 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.503861904 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.503885984 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.505561113 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.505640984 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.505723953 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.505860090 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.505882978 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.517357111 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.517436028 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.517493010 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.517600060 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.517601013 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.517620087 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.517641068 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.519500017 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.519514084 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.519567966 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.519679070 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.519692898 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.536864042 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.537210941 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.537249088 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.537611008 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.537622929 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.559245110 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.559575081 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.559648991 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.559999943 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.560014009 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.667073965 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.667136908 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.667289972 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.667391062 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.667391062 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.667434931 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.667462111 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.669539928 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.669584990 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.669735909 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.669883013 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.669915915 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.690589905 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.690737009 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.690795898 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.690846920 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.690846920 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.690877914 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.690901041 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.692440987 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.692486048 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:14.692621946 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.692754030 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:14.692781925 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.202670097 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.203202963 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.203238010 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.203520060 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.203536034 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.228545904 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.228877068 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.228949070 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.229190111 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.229204893 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.250521898 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.250840902 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.250881910 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.251219988 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.251228094 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.333369970 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.333519936 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.333592892 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.333730936 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.333731890 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.333770990 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.333796978 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.336376905 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.336462021 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.336543083 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.336700916 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.336721897 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.357276917 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.357410908 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.357486963 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.357558012 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.357558012 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.357600927 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.357625961 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.359385014 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.359433889 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.359565973 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.359719038 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.359745979 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.380597115 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.380660057 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.380804062 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.380804062 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.380804062 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.382692099 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.382750988 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.382960081 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.383100033 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.383133888 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.404001951 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.404305935 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.404329062 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.404659986 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.404670000 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.420332909 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.420619011 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.420638084 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.421020985 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.421034098 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.534787893 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.534841061 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.535089016 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.535140991 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.535140991 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.535164118 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.535176039 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.538563967 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.538649082 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.538738966 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.538903952 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.538938046 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.549113989 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.549263000 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.549372911 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.549442053 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.549442053 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.549472094 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.549501896 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.551604986 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.551651001 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.551729918 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.551912069 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.551929951 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:15.694356918 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:15.694395065 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.073957920 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.074522972 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.074561119 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.074920893 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.074927092 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.108551979 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.108998060 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.109025955 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.109324932 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.109338999 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.117511034 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.117999077 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.118087053 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.118199110 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.118213892 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.422147036 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.422229052 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.422471046 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.422561884 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.422588110 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.422601938 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.422609091 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.423284054 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.423286915 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.423403025 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.423449039 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.423470020 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.423516989 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.423541069 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.423585892 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.423644066 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.423701048 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.423749924 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.423795938 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.423811913 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.423928022 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.423928976 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.423957109 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.423979998 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.426677942 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.426763058 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.426847935 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.427212954 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.427234888 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.427273035 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.427294016 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.427397013 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.428610086 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.428643942 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.429224014 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.429290056 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.429358959 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.429536104 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.429563046 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.432055950 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.432401896 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.432425022 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.432818890 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.432831049 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.489789963 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.490269899 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.490319967 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.493292093 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.493304968 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.562215090 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.562361002 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.562566996 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.562665939 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.562665939 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.562716007 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.562747002 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.566112995 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.566167116 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.566318035 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.566528082 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.566567898 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.621979952 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.622009993 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.622052908 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.622128010 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.622296095 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.622324944 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.622370958 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.622385025 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.626025915 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.626079082 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:16.626176119 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.626312971 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:16.626342058 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.164927006 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.164930105 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.165607929 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.165684938 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.165693998 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.165765047 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.166330099 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.166344881 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.166445017 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.166461945 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.172357082 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.172913074 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.172971010 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.173409939 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.173424006 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.299689054 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.299849033 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.300101042 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.300322056 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.300367117 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.300395966 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.300411940 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.302007914 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.302078962 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.302213907 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.302300930 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.302300930 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.302349091 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.302376986 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.306386948 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.306422949 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.306476116 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.306495905 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.306564093 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.306632042 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.306804895 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.306812048 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.306962967 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.307018995 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.308861017 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.308906078 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.308971882 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.308974028 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.309039116 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.309222937 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.309259892 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.309289932 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.309304953 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.312257051 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.312338114 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.312427044 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.312619925 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.312652111 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.321607113 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.322261095 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.322340012 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.323021889 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.323036909 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.399713039 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.400187016 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.400232077 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.400733948 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.400747061 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.457101107 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.457237005 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.457333088 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.457473040 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.457519054 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.457547903 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.457564116 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.461936951 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.461955070 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.462097883 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.462341070 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.462366104 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.539134026 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.539206028 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.539294004 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.540649891 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.540651083 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.540682077 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.540705919 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.543371916 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.543459892 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:17.543797016 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.544178963 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:17.544255018 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.040159941 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.040797949 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.040806055 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.041416883 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.041424990 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.060043097 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.060631990 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.060672998 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.061157942 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.061166048 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.116003990 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.116463900 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.116475105 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.117075920 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.117080927 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.170770884 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.170831919 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.170905113 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.170912027 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.170943975 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.171088934 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.171205997 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.171216011 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.171240091 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.171245098 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.174550056 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.174616098 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.174863100 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.175028086 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.175045013 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.192651987 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.192744017 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.192811966 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.192966938 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.192987919 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.193001986 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.193008900 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.195800066 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.195883989 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.196031094 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.196230888 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.196264029 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.201643944 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.202079058 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.202090979 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.202652931 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.202656984 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.268400908 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.269061089 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.269145966 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.269871950 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.269886971 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.315331936 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.315401077 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.315809011 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.315958023 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.315958023 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.316014051 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.316044092 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.319076061 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.319139957 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.319386959 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.319976091 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.320004940 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.331084013 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.331252098 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.331389904 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.331548929 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.331548929 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.331650019 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.331650019 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.331661940 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.331667900 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.337177038 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.337265968 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.337373018 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.337610960 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.337655067 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.399113894 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.399178028 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.399379015 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.399739981 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.399833918 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.403167963 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.403269053 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.403534889 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.404401064 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.404448032 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.924755096 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.927278042 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.927360058 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.937110901 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.940959930 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.941014051 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.941462040 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.941488028 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:18.942074060 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:18.942097902 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.052505016 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.053073883 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.053107023 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.053776026 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.053787947 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.071414948 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.071424961 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.071523905 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.071597099 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.071760893 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.071785927 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.071800947 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.071808100 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.072252035 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.072351933 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.072619915 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.072659016 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.072686911 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.072700977 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.075381994 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.075468063 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.075562954 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.075639963 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.075644970 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.075722933 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.075901985 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.075928926 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.075937033 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.075952053 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.086316109 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.087007046 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.087090969 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.087479115 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.087532043 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.143532038 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.143959999 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.144002914 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.144522905 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.144532919 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.183615923 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.183649063 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.183691025 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.183767080 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.183937073 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.183964014 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.183993101 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.184006929 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.187057972 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.187103033 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.187186003 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.187377930 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.187393904 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.215828896 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.215903997 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.216084957 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.216253996 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.216300011 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.216332912 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.216348886 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.219677925 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.219741106 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.219829082 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.220001936 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.220027924 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.277827978 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.277887106 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.278064013 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.278218985 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.278239012 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.278251886 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.278259039 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.282124996 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.282170057 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.282246113 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.282502890 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.282511950 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.763828039 CEST	443	49838	142.250.186.68	192.168.2.4
Oct 25, 2024 11:24:19.763993025 CEST	443	49838	142.250.186.68	192.168.2.4
Oct 25, 2024 11:24:19.764064074 CEST	49838	443	192.168.2.4	142.250.186.68
Oct 25, 2024 11:24:19.814553022 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.815186024 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.815248966 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.815767050 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.815782070 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.827172995 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.827611923 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.827649117 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.828119040 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.828133106 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.930361032 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.931185961 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.931247950 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.932826996 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.932835102 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.945275068 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.945341110 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.945431948 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.945437908 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.945506096 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.945744991 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.945744991 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.945790052 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.945822954 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.957285881 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.957346916 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.957425117 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.957726955 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.957748890 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.958722115 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.959939003 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.959968090 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.961889982 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.961905956 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.962543011 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.962702990 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.962894917 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.963027954 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.963071108 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.963099957 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.963115931 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.969567060 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.969630003 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:19.969796896 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.970091105 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:19.970127106 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.014154911 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.015569925 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.015604973 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.017796040 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.017817974 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.064245939 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.064306974 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.064615965 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.064971924 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.064996004 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.065011978 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.065020084 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.072164059 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.072185040 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.072293043 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.073111057 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.073122978 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.091768026 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.091932058 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.092088938 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.092708111 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.092746019 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.098074913 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.098164082 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.098253012 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.098526955 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.098562956 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.144634962 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.144691944 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.144768953 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.145257950 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.145281076 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.145296097 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.145302057 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.151973963 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.151998997 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.152060032 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.152400017 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.152411938 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.719022036 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.722966909 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.741925955 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.741995096 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.743166924 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.743180037 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.743860960 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.743921995 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.744685888 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.744702101 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.815850973 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.816732883 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.816740036 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.817440033 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.817450047 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.873125076 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.873199940 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.873318911 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.873342991 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.873384953 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.873431921 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.873590946 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.873615026 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.873694897 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.873852968 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.874033928 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.876409054 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.876451015 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.882543087 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.882622004 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.882704020 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.883995056 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.884073019 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.884150028 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.884464979 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.884494066 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.885009050 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.885041952 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.891997099 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.892751932 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.892776012 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.893480062 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.893491983 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.898757935 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.899306059 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.899321079 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.900599957 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.900604010 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.950018883 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.950082064 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.950187922 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.950835943 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.950835943 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.950850964 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.950859070 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.956439972 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.956485987 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:20.956564903 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.957313061 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:20.957341909 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.020514011 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.020576954 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.020633936 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.020782948 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.020806074 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.020823002 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.020831108 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.023941040 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.023983955 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.024086952 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.024657965 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.024683952 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.030611992 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.030647039 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.030690908 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.030757904 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.031229019 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.031235933 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.031253099 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.031260014 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.036514997 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.036534071 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.036662102 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.036905050 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.036916018 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.514687061 CEST	49838	443	192.168.2.4	142.250.186.68
Oct 25, 2024 11:24:21.514731884 CEST	443	49838	142.250.186.68	192.168.2.4
Oct 25, 2024 11:24:21.632318974 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.633451939 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.633485079 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.634512901 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.634529114 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.692023993 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.692490101 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.692529917 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.693295002 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.693305969 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.759406090 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.759850025 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.759901047 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.760282040 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.760293961 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.764847040 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.764925003 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.765019894 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.765078068 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.765155077 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.765178919 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.769520998 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.769608974 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.769687891 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.769843102 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.769865990 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.770102978 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.770701885 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.770714998 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.771637917 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.771642923 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.788635969 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.789315939 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.789351940 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.790174961 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.790186882 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.823447943 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.823513031 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.823638916 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.823913097 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.823913097 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.823940992 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.823965073 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.866229057 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.866246939 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.866388083 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.869210005 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.869220972 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.890876055 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.891036987 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.891241074 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.891422987 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.891422987 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.891457081 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.891484022 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.898886919 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.898921967 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.899094105 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.900018930 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.900094032 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.900191069 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.907872915 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.907877922 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.907892942 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.907896996 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.916398048 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.916425943 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.918884039 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.918952942 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.919055939 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.919068098 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.919121027 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.929018974 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.929033041 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.948599100 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.948652983 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.948739052 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.948893070 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.948924065 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.953147888 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.953231096 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:21.953305006 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.954758883 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:21.954799891 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.518837929 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.519292116 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.519354105 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.519706011 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.519721031 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.642173052 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.642642021 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.642664909 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.643028975 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.643038988 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.713555098 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.713959932 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.713980913 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.714303017 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.714309931 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.728224993 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.728534937 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.728579044 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.728972912 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.728985071 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.746273994 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.746577978 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.746593952 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.747047901 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.747052908 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.771403074 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.771547079 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.771601915 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.771620989 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.771657944 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.771733999 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.772033930 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.772058964 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.783250093 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.783297062 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.783375978 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.783554077 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.783576012 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.806075096 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.806173086 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.806230068 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.806252956 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.806282043 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.806375027 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.818537951 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.818562031 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.818613052 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.818629026 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.825148106 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.825170994 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.825370073 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.833971977 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.834002018 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.872375011 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.872524977 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.872586966 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.875996113 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.876024008 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.876338005 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.876511097 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.876563072 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.889004946 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.889072895 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.889368057 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.891582012 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.891604900 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.891637087 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.891654015 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.893280983 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.893280983 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.893296003 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.893305063 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.897442102 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.897510052 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.897577047 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.898674011 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.898716927 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.898750067 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.898760080 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.898844957 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.899194956 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.899240017 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.900218964 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.900240898 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:22.900304079 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.900554895 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:22.900578976 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.531481028 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.532109022 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.532152891 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.532999039 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.533011913 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.602808952 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.603233099 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.603318930 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.604293108 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.604307890 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.622782946 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.623245001 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.623306990 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.623456955 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.623482943 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.629777908 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.630074024 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.630115032 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.630441904 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.630454063 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.645802975 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.646112919 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.646126986 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.646418095 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.646428108 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.667658091 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.667809963 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.667881966 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.668261051 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.668261051 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.668289900 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.668312073 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.670316935 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.670402050 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.670474052 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.670598984 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.670630932 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.981731892 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.981794119 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.981946945 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.981995106 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.982059002 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.982062101 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.982121944 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.982136965 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.982136965 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.982158899 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.982166052 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.982178926 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.982203960 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.982218027 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.982280016 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.982280970 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.982319117 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.982336998 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.982369900 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.982374907 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.982573986 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.982594967 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.982604027 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.982640982 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.982656002 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.983935118 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.983968019 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.984004021 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.984004021 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.984004021 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.984026909 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.984046936 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.984066963 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.987509966 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.987570047 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.987575054 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.987615108 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.987646103 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.987677097 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.987818956 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.987838030 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.987948895 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.987984896 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.988341093 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.988362074 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.988466978 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.988640070 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.988655090 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.989278078 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.989300966 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:23.989406109 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.989547968 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:23.989572048 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.732331038 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.732364893 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.732878923 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.732904911 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.733261108 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.733294964 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.733690977 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.733858109 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.733866930 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.733971119 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.733977079 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.734317064 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.734350920 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.734370947 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.734715939 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.734730959 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.735022068 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.735037088 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.735235929 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.735241890 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.740720034 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.741106033 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.741137981 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.741581917 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.741594076 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.861691952 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.862931013 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.863204956 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.863217115 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.863267899 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.863295078 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.863354921 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.863405943 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.863432884 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.863461971 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.863461971 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.863462925 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.863483906 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.863512039 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.863603115 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.864432096 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.864743948 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.864907980 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.865097046 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.865120888 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.865138054 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.865145922 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.866915941 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.866982937 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.867122889 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.867583990 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.867597103 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.867618084 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.867643118 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.867691994 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.867729902 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.867844105 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.867852926 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.868015051 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.868047953 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.868074894 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.868092060 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.869235992 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.869242907 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.869384050 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.869544029 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.869580984 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.869695902 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.869708061 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.870811939 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.870834112 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.871047020 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.871239901 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.871264935 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.871794939 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.871957064 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.872026920 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.872045994 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.872082949 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.872158051 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.872226000 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.872226000 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.872242928 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.872262001 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.874828100 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.874875069 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:24.874949932 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.875116110 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:24.875144005 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.604988098 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.605504036 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.605518103 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.606010914 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.606014967 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.610816002 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.611151934 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.611183882 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.611669064 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.611684084 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.614552021 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.614914894 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.614928961 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.615336895 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.615340948 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.615509033 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.615786076 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.615802050 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.616256952 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.616267920 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.633869886 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.634229898 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.634255886 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.634768963 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.634784937 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.735898972 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.736134052 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.736217022 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.736237049 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.736247063 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.736284971 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.736289978 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.738820076 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.738903999 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.738979101 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.739090919 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.739125967 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.741679907 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.741882086 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.741935968 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.741986990 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.741986990 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.742013931 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.742037058 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.744390965 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.744435072 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.744503975 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.744645119 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.744672060 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.748107910 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.748184919 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.748239994 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.748358011 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.748358011 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.748378038 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.748400927 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.749697924 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.750194073 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.750279903 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.750279903 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.750329018 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.750333071 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.750804901 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.750828028 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.751019001 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.751173973 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.751199007 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.752399921 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.752470970 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.752542973 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.752649069 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.752681971 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.772707939 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.772880077 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.772941113 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.773009062 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.773009062 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.773034096 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.773056030 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.775255919 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.775350094 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:25.775439978 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.775574923 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:25.775609970 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.477248907 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.477868080 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.477924109 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.478455067 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.478470087 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.498924017 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.499301910 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.499372959 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.499890089 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.499906063 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.505306959 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.505760908 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.505789042 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.506280899 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.506292105 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.506649971 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.507128954 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.507148027 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.507673025 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.507683992 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.530302048 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.530751944 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.530812025 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.531142950 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.531157017 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.620575905 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.622282982 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.622559071 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.622643948 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.622683048 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.622735977 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.622751951 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.625252008 CEST	49934	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.625335932 CEST	443	49934	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.625499964 CEST	49934	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.625583887 CEST	49934	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.625602961 CEST	443	49934	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.644324064 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.646143913 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.646222115 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.646245956 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.646277905 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.646367073 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.646367073 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.646392107 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.646426916 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.646436930 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.646472931 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.646644115 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.647973061 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.648019075 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.648019075 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.648042917 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.648066044 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.649692059 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.649756908 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.649805069 CEST	49935	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.649889946 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.649945021 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.650012970 CEST	49935	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.650135040 CEST	49935	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.650157928 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.650463104 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.650485992 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.650532961 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.650548935 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.651386023 CEST	49936	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.651427984 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.651524067 CEST	49936	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.651882887 CEST	49936	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.651915073 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.652937889 CEST	49937	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.652975082 CEST	443	49937	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.653106928 CEST	49937	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.653203964 CEST	49937	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.653237104 CEST	443	49937	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.665944099 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.666060925 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.666296959 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.666296959 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.666296959 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.668626070 CEST	49938	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.668653965 CEST	443	49938	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.668797970 CEST	49938	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.668898106 CEST	49938	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.668910980 CEST	443	49938	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:26.975239992 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:26.975301981 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.366945982 CEST	443	49934	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.367574930 CEST	49934	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.367618084 CEST	443	49934	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.368347883 CEST	49934	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.368361950 CEST	443	49934	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.624227047 CEST	443	49937	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.624942064 CEST	49937	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.624984980 CEST	443	49937	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.625608921 CEST	49937	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.625622988 CEST	443	49937	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.625994921 CEST	443	49934	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.626143932 CEST	443	49934	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.626354933 CEST	49934	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.626363039 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.626821041 CEST	49935	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.626854897 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.627438068 CEST	49935	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.627463102 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.627473116 CEST	49934	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.627511978 CEST	443	49934	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.627542973 CEST	49934	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.627559900 CEST	443	49934	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.628742933 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.629460096 CEST	49936	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.629538059 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.630034924 CEST	49936	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.630052090 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.630697012 CEST	443	49938	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.631074905 CEST	49938	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.631098986 CEST	443	49938	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.631567001 CEST	49938	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.631577015 CEST	443	49938	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.631756067 CEST	49939	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.631802082 CEST	443	49939	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.632719040 CEST	49939	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.632941008 CEST	49939	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.632966042 CEST	443	49939	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.754079103 CEST	443	49937	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.754190922 CEST	443	49937	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.754246950 CEST	49937	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.754261971 CEST	443	49937	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.754323006 CEST	443	49937	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.754371881 CEST	49937	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.754411936 CEST	49937	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.754426003 CEST	443	49937	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.754442930 CEST	49937	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.754448891 CEST	443	49937	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.756383896 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.756412983 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.756467104 CEST	49935	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.756525993 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.756783009 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.756920099 CEST	49935	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.756970882 CEST	49935	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.756970882 CEST	49935	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.757004976 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.757029057 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.757219076 CEST	49940	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.757261992 CEST	443	49940	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.757354021 CEST	49940	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.757527113 CEST	49940	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.757558107 CEST	443	49940	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.759473085 CEST	49941	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.759536028 CEST	443	49941	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.759716988 CEST	49941	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.759716988 CEST	49941	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.759793043 CEST	443	49941	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.762217045 CEST	443	49938	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.762295008 CEST	443	49938	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.762361050 CEST	49938	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.762439013 CEST	49938	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.762439013 CEST	49938	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.762474060 CEST	443	49938	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.762496948 CEST	443	49938	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.762877941 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.763195038 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.763266087 CEST	49936	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.763286114 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.763355017 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.763390064 CEST	49936	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.763390064 CEST	49936	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.763415098 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.763447046 CEST	49936	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.763459921 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.764938116 CEST	49942	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.764960051 CEST	443	49942	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.765033007 CEST	49942	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.765155077 CEST	49942	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.765182018 CEST	443	49942	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.765693903 CEST	49943	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.765710115 CEST	443	49943	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:27.765847921 CEST	49943	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.765952110 CEST	49943	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:27.765964985 CEST	443	49943	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.615859032 CEST	443	49939	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.616835117 CEST	49939	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.616835117 CEST	49939	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.616867065 CEST	443	49939	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.616905928 CEST	443	49939	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.739142895 CEST	443	49940	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.739799023 CEST	49940	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.739886045 CEST	443	49940	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.740602970 CEST	443	49942	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.740636110 CEST	49940	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.740649939 CEST	443	49940	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.741029978 CEST	49942	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.741044998 CEST	443	49942	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.741566896 CEST	49942	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.741578102 CEST	443	49942	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.744776964 CEST	443	49941	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.745193005 CEST	49941	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.745276928 CEST	443	49941	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.745768070 CEST	49941	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.745783091 CEST	443	49941	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.747343063 CEST	443	49939	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.747412920 CEST	443	49939	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.747504950 CEST	49939	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.747525930 CEST	443	49939	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.747598886 CEST	49939	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.747693062 CEST	49939	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.747719049 CEST	443	49939	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.747755051 CEST	49939	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.747769117 CEST	443	49939	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.748258114 CEST	443	49943	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.748795986 CEST	49943	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.748811007 CEST	443	49943	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.750478983 CEST	49943	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.750485897 CEST	443	49943	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.750483990 CEST	49944	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.750569105 CEST	443	49944	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.750818968 CEST	49944	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.750885963 CEST	49944	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.750905037 CEST	443	49944	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.872733116 CEST	443	49942	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.872780085 CEST	443	49942	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.872823954 CEST	443	49942	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.873142004 CEST	49942	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.873142004 CEST	49942	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.873770952 CEST	49942	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.873800039 CEST	443	49942	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.875731945 CEST	49945	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.875763893 CEST	443	49945	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.876106977 CEST	49945	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.876106977 CEST	49945	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.876142025 CEST	443	49945	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.876925945 CEST	443	49941	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.877001047 CEST	443	49941	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.877109051 CEST	49941	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.877123117 CEST	443	49941	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.877160072 CEST	443	49941	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.877230883 CEST	49941	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.877230883 CEST	49941	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.877250910 CEST	443	49941	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.877269983 CEST	49941	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.877275944 CEST	443	49941	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.879796028 CEST	49946	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.879863977 CEST	443	49946	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.880000114 CEST	49946	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.880101919 CEST	49946	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.880120993 CEST	443	49946	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.881480932 CEST	443	49943	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.881553888 CEST	443	49943	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.881597042 CEST	443	49943	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.881694078 CEST	49943	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.881694078 CEST	49943	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.881834030 CEST	49943	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.881841898 CEST	443	49943	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.884262085 CEST	49947	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.884310007 CEST	443	49947	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.884442091 CEST	49947	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.884635925 CEST	49947	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.884681940 CEST	443	49947	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.906641960 CEST	443	49940	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.906853914 CEST	443	49940	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.906934977 CEST	49940	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.906989098 CEST	49940	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.906989098 CEST	49940	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.906999111 CEST	443	49940	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.907007933 CEST	443	49940	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.908919096 CEST	49948	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.909002066 CEST	443	49948	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:28.909185886 CEST	49948	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.909306049 CEST	49948	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:28.909341097 CEST	443	49948	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:29.476736069 CEST	443	49944	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:29.477849960 CEST	49944	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:29.477849960 CEST	49944	443	192.168.2.4	13.107.246.45
Oct 25, 2024 11:24:29.477890968 CEST	443	49944	13.107.246.45	192.168.2.4
Oct 25, 2024 11:24:29.477931023 CEST	443	49944	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 25, 2024 11:23:04.701872110 CEST	53	50034	1.1.1.1	192.168.2.4
Oct 25, 2024 11:23:04.887162924 CEST	53	49195	1.1.1.1	192.168.2.4
Oct 25, 2024 11:23:06.160132885 CEST	53	63719	1.1.1.1	192.168.2.4
Oct 25, 2024 11:23:06.709656954 CEST	61606	53	192.168.2.4	1.1.1.1
Oct 25, 2024 11:23:06.709820986 CEST	52590	53	192.168.2.4	1.1.1.1
Oct 25, 2024 11:23:08.820839882 CEST	64210	53	192.168.2.4	1.1.1.1
Oct 25, 2024 11:23:08.821058035 CEST	58779	53	192.168.2.4	1.1.1.1
Oct 25, 2024 11:23:08.828563929 CEST	53	58779	1.1.1.1	192.168.2.4
Oct 25, 2024 11:23:08.828800917 CEST	53	64210	1.1.1.1	192.168.2.4
Oct 25, 2024 11:23:10.351788998 CEST	49233	53	192.168.2.4	1.1.1.1
Oct 25, 2024 11:23:10.352154016 CEST	60395	53	192.168.2.4	1.1.1.1
Oct 25, 2024 11:23:11.900876045 CEST	62013	53	192.168.2.4	1.1.1.1
Oct 25, 2024 11:23:11.901007891 CEST	49962	53	192.168.2.4	1.1.1.1
Oct 25, 2024 11:23:11.908916950 CEST	53	62013	1.1.1.1	192.168.2.4
Oct 25, 2024 11:23:11.909848928 CEST	53	49962	1.1.1.1	192.168.2.4
Oct 25, 2024 11:23:13.681801081 CEST	50070	53	192.168.2.4	1.1.1.1
Oct 25, 2024 11:23:13.682419062 CEST	51722	53	192.168.2.4	1.1.1.1
Oct 25, 2024 11:23:13.691553116 CEST	53	50070	1.1.1.1	192.168.2.4
Oct 25, 2024 11:23:13.692042112 CEST	53	51722	1.1.1.1	192.168.2.4
Oct 25, 2024 11:23:15.257653952 CEST	59978	53	192.168.2.4	1.1.1.1
Oct 25, 2024 11:23:15.258075953 CEST	54897	53	192.168.2.4	1.1.1.1
Oct 25, 2024 11:23:18.433115005 CEST	53	56351	1.1.1.1	192.168.2.4
Oct 25, 2024 11:23:22.114347935 CEST	138	138	192.168.2.4	192.168.2.255
Oct 25, 2024 11:23:24.094218969 CEST	53	65344	1.1.1.1	192.168.2.4
Oct 25, 2024 11:23:43.069087029 CEST	53	53249	1.1.1.1	192.168.2.4
Oct 25, 2024 11:24:04.486277103 CEST	53	58260	1.1.1.1	192.168.2.4
Oct 25, 2024 11:24:05.638988018 CEST	53	52682	1.1.1.1	192.168.2.4
Oct 25, 2024 11:24:08.870985985 CEST	52472	53	192.168.2.4	1.1.1.1
Oct 25, 2024 11:24:08.871114016 CEST	62500	53	192.168.2.4	1.1.1.1
Oct 25, 2024 11:24:08.878540039 CEST	53	62500	1.1.1.1	192.168.2.4
Oct 25, 2024 11:24:08.878788948 CEST	53	52472	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 25, 2024 11:23:06.709656954 CEST	192.168.2.4	1.1.1.1	0x1ce0	Standard query (0)	nam.safelink.emails.azure.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:23:06.709820986 CEST	192.168.2.4	1.1.1.1	0xe570	Standard query (0)	nam.safelink.emails.azure.net	65	IN (0x0001)	false
Oct 25, 2024 11:23:08.820839882 CEST	192.168.2.4	1.1.1.1	0x8fa0	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:23:08.821058035 CEST	192.168.2.4	1.1.1.1	0x4797	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 25, 2024 11:23:10.351788998 CEST	192.168.2.4	1.1.1.1	0x1783	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:23:10.352154016 CEST	192.168.2.4	1.1.1.1	0x929f	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Oct 25, 2024 11:23:11.900876045 CEST	192.168.2.4	1.1.1.1	0x99b7	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:23:11.901007891 CEST	192.168.2.4	1.1.1.1	0xf2b	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Oct 25, 2024 11:23:13.681801081 CEST	192.168.2.4	1.1.1.1	0x9208	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:23:13.682419062 CEST	192.168.2.4	1.1.1.1	0xcc8d	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Oct 25, 2024 11:23:15.257653952 CEST	192.168.2.4	1.1.1.1	0x844	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:23:15.258075953 CEST	192.168.2.4	1.1.1.1	0xcb81	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Oct 25, 2024 11:24:08.870985985 CEST	192.168.2.4	1.1.1.1	0x4d41	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:24:08.871114016 CEST	192.168.2.4	1.1.1.1	0x518b	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 25, 2024 11:23:06.842358112 CEST	1.1.1.1	192.168.2.4	0xe570	No error (0)	nam.safelink.emails.azure.net	meo-traf-nam.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:23:06.842358112 CEST	1.1.1.1	192.168.2.4	0xe570	No error (0)	meo-afd-nam-ggd3beb3e0hnezbu.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:23:06.853635073 CEST	1.1.1.1	192.168.2.4	0x1ce0	No error (0)	nam.safelink.emails.azure.net	meo-traf-nam.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:23:06.853635073 CEST	1.1.1.1	192.168.2.4	0x1ce0	No error (0)	meo-afd-nam-ggd3beb3e0hnezbu.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:23:06.853635073 CEST	1.1.1.1	192.168.2.4	0x1ce0	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:23:06.853635073 CEST	1.1.1.1	192.168.2.4	0x1ce0	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:23:08.036469936 CEST	1.1.1.1	192.168.2.4	0xef1f	No error (0)	admin-portal.office.com	portal-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:23:08.037153959 CEST	1.1.1.1	192.168.2.4	0x4b89	No error (0)	admin-portal.office.com	portal-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:23:08.828563929 CEST	1.1.1.1	192.168.2.4	0x4797	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 25, 2024 11:23:08.828800917 CEST	1.1.1.1	192.168.2.4	0x8fa0	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:23:10.359528065 CEST	1.1.1.1	192.168.2.4	0x929f	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:23:10.360372066 CEST	1.1.1.1	192.168.2.4	0x1783	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:23:11.908916950 CEST	1.1.1.1	192.168.2.4	0x99b7	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:23:11.908916950 CEST	1.1.1.1	192.168.2.4	0x99b7	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:23:11.908916950 CEST	1.1.1.1	192.168.2.4	0x99b7	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:23:11.909848928 CEST	1.1.1.1	192.168.2.4	0xf2b	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:23:11.909848928 CEST	1.1.1.1	192.168.2.4	0xf2b	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:23:13.691553116 CEST	1.1.1.1	192.168.2.4	0x9208	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:23:13.691553116 CEST	1.1.1.1	192.168.2.4	0x9208	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:23:13.691553116 CEST	1.1.1.1	192.168.2.4	0x9208	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:23:13.692042112 CEST	1.1.1.1	192.168.2.4	0xcc8d	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:23:13.692042112 CEST	1.1.1.1	192.168.2.4	0xcc8d	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:23:15.282759905 CEST	1.1.1.1	192.168.2.4	0xcb81	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:23:15.282778978 CEST	1.1.1.1	192.168.2.4	0x844	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:23:15.293200970 CEST	1.1.1.1	192.168.2.4	0xcfca	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:23:15.293200970 CEST	1.1.1.1	192.168.2.4	0xcfca	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:23:17.204087019 CEST	1.1.1.1	192.168.2.4	0xad60	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:23:17.204087019 CEST	1.1.1.1	192.168.2.4	0xad60	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:23:18.661191940 CEST	1.1.1.1	192.168.2.4	0x93ee	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:23:18.661191940 CEST	1.1.1.1	192.168.2.4	0x93ee	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:23:19.352742910 CEST	1.1.1.1	192.168.2.4	0x28e5	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:23:19.352742910 CEST	1.1.1.1	192.168.2.4	0x28e5	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:23:34.265913963 CEST	1.1.1.1	192.168.2.4	0x2e74	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:23:34.265913963 CEST	1.1.1.1	192.168.2.4	0x2e74	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:23:57.630048037 CEST	1.1.1.1	192.168.2.4	0x152c	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:23:57.630048037 CEST	1.1.1.1	192.168.2.4	0x152c	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:24:08.878540039 CEST	1.1.1.1	192.168.2.4	0x518b	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 25, 2024 11:24:08.878788948 CEST	1.1.1.1	192.168.2.4	0x4d41	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:24:17.845041990 CEST	1.1.1.1	192.168.2.4	0x96a	No error (0)	shed.dual-low.s-part-0023.t-0009.t-msedge.net	s-part-0023.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:24:17.845041990 CEST	1.1.1.1	192.168.2.4	0x96a	No error (0)	s-part-0023.t-0009.t-msedge.net		13.107.246.51	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

nam.safelink.emails.azure.net

fs.microsoft.com

https:

aadcdn.msftauth.net

aadcdn.msauth.net

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	13.107.246.45	443	4228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:23:07 UTC	893	OUT	GET /redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT00NTQ5MjI1Zi1iOGVjLTQ5MWYtODYyMy03ODE1ZmYxMjg0ZjImcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l HTTP/1.1 Host: nam.safelink.emails.azure.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 09:23:08 UTC	785	IN	HTTP/1.1 302 Found Date: Fri, 25 Oct 2024 09:23:07 GMT Content-Type: text/html; charset=utf-8 Content-Length: 177 Connection: close Cache-Control: private Location: https://admin.microsoft.com/adminportal/home?#/subscriptions Set-Cookie: ASP.NET_SessionId=g3wwnn3jasxsrb3smn3d2idx; path=/; secure; HttpOnly; SameSite=Lax Strict-Transport-Security: max-age=31536000 Azure-Version: 20241022-0113-424242 Azure-SiteName: meo-api-nam-cu07-bn Azure-InstanceId: 56bb749273bf3e48971348b5652fd5d438f90662a1babc21ce62f54b15c97cb4 Azure-RegionName: East US 2 Azure-SlotName: unknown X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Arr-Disable-Session-Affinity: true x-azure-ref: 20241025T092307Z-16849878b785jrf8dn0d2rczaw00000001eg000000009gbp X-Cache: CONFIG_NOCACHE
2024-10-25 09:23:08 UTC	177	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 64 6d 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 61 64 6d 69 6e 70 6f 72 74 61 6c 2f 68 6f 6d 65 3f 23 2f 73 75 62 73 63 72 69 70 74 69 6f 6e 73 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://admin.microsoft.com/adminportal/home?#/subscriptions">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49743	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:23:10 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-25 09:23:10 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=199312 Date: Fri, 25 Oct 2024 09:23:10 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49746	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:23:11 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-25 09:23:11 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=199311 Date: Fri, 25 Oct 2024 09:23:11 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-25 09:23:11 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49747	152.199.21.175	443	4228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:23:12 UTC	635	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 09:23:13 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1928419 Cache-Control: public, max-age=31536000 Content-MD5: m5bMCfnonQM0ui+8IrUZeg== Content-Type: application/x-javascript Date: Fri, 25 Oct 2024 09:23:13 GMT Etag: 0x8DCE31CBE97473C Last-Modified: Wed, 02 Oct 2024 19:59:37 GMT Server: ECAcc (lhc/78AB) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fb7c97c3-801e-0062-1535-154340000000 x-ms-version: 2009-09-19 Content-Length: 142367 Connection: close
2024-10-25 09:23:13 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-10-25 09:23:13 UTC	16383	IN	Data Raw: 29 29 7d 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 6f 5d 2e 73 70 6c 69 74 28 22 2c 22 29 2e 6d 61 70 28 4e 75 6d 62 65 72 29 2c 61 3d 69 5b 30 5d 2c 73 3d 69 5b 31 5d 2c 75 3d 69 5b 32 5d 3b 69 66 28 72 28 65 2c 61 2c 73 2c 75 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 21 6c 2e 66 69 72 73 74 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 65 2e 74 72 69 6d 28 29 7d 29 29 7d 69 66 28 5f 2e 69 73 48 69 67 68 43 6f 6e 74 72 61 73 74 28 29 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2c 6e 3d 5f 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 Data Ascii: ))}for(var o=0;o<t.length;o++){var i=t[o].split(",").map(Number),a=i[0],s=i[1],u=i[2];if(r(e,a,s,u))return!0}return!!l.first(n,(function(t){return t===e.trim()}))}if(_.isHighContrast()){var t=document.getElementsByTagName("body")[0],n=_.getComputedStyle(t
2024-10-25 09:23:13 UTC	16383	IN	Data Raw: 50 50 5f 45 5f 4e 41 4d 45 5f 54 4f 4f 5f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 30 31 22 2c 50 50 5f 45 5f 4e 41 4d 45 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 31 31 30 33 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 41 52 47 3a 22 38 30 30 34 38 33 38 38 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 32 30 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 4c 4f 4e 47 3a 22 38 30 30 34 31 31 32 31 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 5f 50 48 4f 4e 45 4e 55 4d 42 45 52 3a 22 38 30 30 34 31 31 33 46 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 51 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 41 3a 22 38 30 30 34 31 31 36 35 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 41 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 51 3a 22 38 30 30 34 31 Data Ascii: PP_E_NAME_TOO_SHORT:"80041101",PP_E_NAME_INVALID:"80041103",PP_E_INVALIDARG:"80048388",PP_E_SA_TOOSHORT:"80041120",PP_E_SA_TOOLONG:"80041121",PP_E_INVALID_PHONENUMBER:"8004113F",PP_E_SECRETQ_CONTAINS_SECRETA:"80041165",PP_E_SECRETA_CONTAINS_SECRETQ:"80041
2024-10-25 09:23:13 UTC	3	IN	Data Raw: 3a 22 55 Data Ascii: :"U
2024-10-25 09:23:13 UTC	16383	IN	Data Raw: 49 45 76 65 6e 74 73 22 5d 3d 5b 22 6b 65 79 75 70 22 2c 22 6b 65 79 64 6f 77 6e 22 2c 22 6b 65 79 70 72 65 73 73 22 5d 2c 70 2e 4d 6f 75 73 65 45 76 65 6e 74 73 3d 22 63 6c 69 63 6b 20 64 62 6c 63 6c 69 63 6b 20 6d 6f 75 73 65 64 6f 77 6e 20 6d 6f 75 73 65 75 70 20 6d 6f 75 73 65 6d 6f 76 65 20 6d 6f 75 73 65 6f 76 65 72 20 6d 6f 75 73 65 6f 75 74 20 6d 6f 75 73 65 65 6e 74 65 72 20 6d 6f 75 73 65 6c 65 61 76 65 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 65 28 70 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 68 5b 74 5b 6e 5d 5d 3d 65 7d 29 29 3b 76 61 72 20 67 2c 6d 3d 7b 70 72 6f 70 65 72 74 79 63 68 61 6e 67 65 3a 21 30 7d 2c Data Ascii: IEvents"]=["keyup","keydown","keypress"],p.MouseEvents="click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave".split(" "),e(p,(function(e,t){if(t.length)for(var n=0,r=t.length;n<r;n++)h[t[n]]=e}));var g,m={propertychange:!0},
2024-10-25 09:23:13 UTC	16383	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 2e 6f 7d 7d 7d 28 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 22 2c 53 2e 53 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 43 6f 75 6e 74 22 2c 53 2e 53 2e 71 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 22 2c 53 2e 53 2e 56 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 69 73 49 6e 69 74 69 61 6c 22 2c 53 2e 53 2e 59 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 72 65 67 69 73 74 65 72 44 65 70 65 6e 64 65 6e 63 79 22 2c 53 2e 53 2e 63 63 29 2c 53 2e 62 28 22 69 67 6e 6f Data Ascii: :function(){if(n)return n.o}}}(),S.b("computedContext",S.S),S.b("computedContext.getDependenciesCount",S.S.qa),S.b("computedContext.getDependencies",S.S.Va),S.b("computedContext.isInitial",S.S.Ya),S.b("computedContext.registerDependency",S.S.cc),S.b("igno
2024-10-25 09:23:13 UTC	16383	IN	Data Raw: 2e 6d 2e 76 62 28 65 2c 72 29 2b 22 7d 7d 7d 22 3b 73 3d 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 24 63 6f 6e 74 65 78 74 22 2c 22 24 65 6c 65 6d 65 6e 74 22 2c 75 29 2c 6f 3d 69 5b 61 5d 3d 73 7d 72 65 74 75 72 6e 20 6f 28 74 2c 6e 29 7d 63 61 74 63 68 28 63 29 7b 74 68 72 6f 77 20 63 2e 6d 65 73 73 61 67 65 3d 22 55 6e 61 62 6c 65 20 74 6f 20 70 61 72 73 65 20 62 69 6e 64 69 6e 67 73 2e 5c 6e 42 69 6e 64 69 6e 67 73 20 76 61 6c 75 65 3a 20 22 2b 65 2b 22 5c 6e 4d 65 73 73 61 67 65 3a 20 22 2b 63 2e 6d 65 73 73 61 67 65 2c 63 7d 7d 7d 29 2c 53 2e 67 61 2e 69 6e 73 74 61 6e 63 65 3d 6e 65 77 20 53 2e 67 61 2c 53 2e 62 28 22 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 22 2c 53 2e 67 61 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 Data Ascii: .m.vb(e,r)+"}}}";s=new Function("$context","$element",u),o=i[a]=s}return o(t,n)}catch(c){throw c.message="Unable to parse bindings.\nBindings value: "+e+"\nMessage: "+c.message,c}}}),S.ga.instance=new S.ga,S.b("bindingProvider",S.ga),function(){function e
2024-10-25 09:23:13 UTC	16383	IN	Data Raw: 73 65 74 22 29 26 26 6e 2e 68 61 73 28 22 76 61 6c 75 65 22 29 2c 64 3d 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 49 6e 63 6c 75 64 65 44 65 73 74 72 6f 79 65 64 22 29 3b 74 3d 7b 7d 3b 76 61 72 20 66 2c 70 3d 5b 5d 3b 6c 7c 7c 28 73 3f 70 3d 53 2e 61 2e 4d 62 28 72 28 29 2c 53 2e 77 2e 4d 29 3a 30 3c 3d 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 26 26 70 2e 70 75 73 68 28 53 2e 77 2e 4d 28 65 2e 6f 70 74 69 6f 6e 73 5b 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 5d 29 29 29 2c 63 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 2e 6c 65 6e 67 74 68 26 26 28 63 3d 5b 63 5d 29 2c 66 3d 53 2e 61 2e 6a 62 28 63 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 7c 7c 65 3d 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 3d 65 7c 7c Data Ascii: set")&&n.has("value"),d=n.get("optionsIncludeDestroyed");t={};var f,p=[];l\|\|(s?p=S.a.Mb(r(),S.w.M):0<=e.selectedIndex&&p.push(S.w.M(e.options[e.selectedIndex]))),c&&("undefined"==typeof c.length&&(c=[c]),f=S.a.jb(c,(function(e){return d\|\|e===a\|\|null===e\|\|
2024-10-25 09:23:13 UTC	16383	IN	Data Raw: 75 72 6e 20 69 7c 7c 28 69 3d 74 2e 74 65 78 74 28 29 7c 7c 22 22 2c 69 3d 6c 2e 74 65 6d 70 6c 61 74 65 28 6e 75 6c 6c 2c 22 7b 7b 6b 6f 5f 77 69 74 68 20 24 69 74 65 6d 2e 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 7d 7d 22 2b 69 2b 22 7b 7b 2f 6b 6f 5f 77 69 74 68 7d 7d 22 29 2c 74 2e 64 61 74 61 28 22 70 72 65 63 6f 6d 70 69 6c 65 64 22 2c 69 29 29 2c 74 3d 5b 6e 2e 24 64 61 74 61 5d 2c 6e 3d 6c 2e 65 78 74 65 6e 64 28 7b 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 3a 6e 7d 2c 72 2e 74 65 6d 70 6c 61 74 65 4f 70 74 69 6f 6e 73 29 2c 28 6e 3d 6c 2e 74 6d 70 6c 28 69 2c 74 2c 6e 29 29 2e 61 70 70 65 6e 64 54 6f 28 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2c 6c 2e 66 72 61 67 6d 65 6e 74 73 3d 7b 7d 2c 6e 7d 2c 74 68 Data Ascii: urn i\|\|(i=t.text()\|\|"",i=l.template(null,"{{ko_with $item.koBindingContext}}"+i+"{{/ko_with}}"),t.data("precompiled",i)),t=[n.$data],n=l.extend({koBindingContext:n},r.templateOptions),(n=l.tmpl(i,t,n)).appendTo(o.createElement("div")),l.fragments={},n},th
2024-10-25 09:23:13 UTC	11300	IN	Data Raw: 3d 65 2e 6e 6f 74 69 66 79 4f 6e 43 6c 69 65 6e 74 41 62 6f 72 74 7c 7c 21 31 2c 6d 3d 6c 2e 53 65 72 76 65 72 44 61 74 61 2e 66 53 61 73 45 6e 64 41 75 74 68 50 6f 73 74 54 6f 47 65 74 53 77 69 74 63 68 2c 76 3d 6c 2e 53 65 72 76 65 72 44 61 74 61 2e 66 46 69 78 55 49 43 72 61 73 68 46 6f 72 41 70 69 52 65 71 75 65 73 74 48 61 6e 64 6c 65 72 3b 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 76 61 72 20 74 3d 7b 68 70 67 69 64 3a 64 2e 68 70 67 69 64 7c 7c 30 2c 68 70 67 61 63 74 3a 64 2e 68 70 67 61 63 74 7c 7c 30 7d 3b 72 65 74 75 72 6e 20 65 7c 7c 28 74 2e 41 63 63 65 70 74 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 2c 6e 26 26 64 2e 61 70 69 43 61 6e 61 72 79 26 26 28 74 2e 63 61 6e 61 72 79 3d 64 2e 61 70 69 43 61 6e 61 72 79 29 29 2c 64 2e Data Ascii: =e.notifyOnClientAbort\|\|!1,m=l.ServerData.fSasEndAuthPostToGetSwitch,v=l.ServerData.fFixUICrashForApiRequestHandler;function b(e){var t={hpgid:d.hpgid\|\|0,hpgact:d.hpgact\|\|0};return e\|\|(t.Accept="application/json",n&&d.apiCanary&&(t.canary=d.apiCanary)),d.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49751	152.199.21.175	443	4228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:23:14 UTC	410	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 09:23:15 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1928420 Cache-Control: public, max-age=31536000 Content-MD5: m5bMCfnonQM0ui+8IrUZeg== Content-Type: application/x-javascript Date: Fri, 25 Oct 2024 09:23:14 GMT Etag: 0x8DCE31CBE97473C Last-Modified: Wed, 02 Oct 2024 19:59:37 GMT Server: ECAcc (lhc/78AB) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fb7c97c3-801e-0062-1535-154340000000 x-ms-version: 2009-09-19 Content-Length: 142367 Connection: close
2024-10-25 09:23:15 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-10-25 09:23:15 UTC	1	IN	Data Raw: 29 Data Ascii: )
2024-10-25 09:23:15 UTC	16383	IN	Data Raw: 29 7d 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 6f 5d 2e 73 70 6c 69 74 28 22 2c 22 29 2e 6d 61 70 28 4e 75 6d 62 65 72 29 2c 61 3d 69 5b 30 5d 2c 73 3d 69 5b 31 5d 2c 75 3d 69 5b 32 5d 3b 69 66 28 72 28 65 2c 61 2c 73 2c 75 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 21 6c 2e 66 69 72 73 74 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 65 2e 74 72 69 6d 28 29 7d 29 29 7d 69 66 28 5f 2e 69 73 48 69 67 68 43 6f 6e 74 72 61 73 74 28 29 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2c 6e 3d 5f 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 29 Data Ascii: )}for(var o=0;o<t.length;o++){var i=t[o].split(",").map(Number),a=i[0],s=i[1],u=i[2];if(r(e,a,s,u))return!0}return!!l.first(n,(function(t){return t===e.trim()}))}if(_.isHighContrast()){var t=document.getElementsByTagName("body")[0],n=_.getComputedStyle(t)
2024-10-25 09:23:15 UTC	16383	IN	Data Raw: 50 5f 45 5f 4e 41 4d 45 5f 54 4f 4f 5f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 30 31 22 2c 50 50 5f 45 5f 4e 41 4d 45 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 31 31 30 33 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 41 52 47 3a 22 38 30 30 34 38 33 38 38 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 32 30 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 4c 4f 4e 47 3a 22 38 30 30 34 31 31 32 31 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 5f 50 48 4f 4e 45 4e 55 4d 42 45 52 3a 22 38 30 30 34 31 31 33 46 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 51 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 41 3a 22 38 30 30 34 31 31 36 35 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 41 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 51 3a 22 38 30 30 34 31 31 Data Ascii: P_E_NAME_TOO_SHORT:"80041101",PP_E_NAME_INVALID:"80041103",PP_E_INVALIDARG:"80048388",PP_E_SA_TOOSHORT:"80041120",PP_E_SA_TOOLONG:"80041121",PP_E_INVALID_PHONENUMBER:"8004113F",PP_E_SECRETQ_CONTAINS_SECRETA:"80041165",PP_E_SECRETA_CONTAINS_SECRETQ:"800411
2024-10-25 09:23:15 UTC	16383	IN	Data Raw: 22 55 49 45 76 65 6e 74 73 22 5d 3d 5b 22 6b 65 79 75 70 22 2c 22 6b 65 79 64 6f 77 6e 22 2c 22 6b 65 79 70 72 65 73 73 22 5d 2c 70 2e 4d 6f 75 73 65 45 76 65 6e 74 73 3d 22 63 6c 69 63 6b 20 64 62 6c 63 6c 69 63 6b 20 6d 6f 75 73 65 64 6f 77 6e 20 6d 6f 75 73 65 75 70 20 6d 6f 75 73 65 6d 6f 76 65 20 6d 6f 75 73 65 6f 76 65 72 20 6d 6f 75 73 65 6f 75 74 20 6d 6f 75 73 65 65 6e 74 65 72 20 6d 6f 75 73 65 6c 65 61 76 65 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 65 28 70 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 68 5b 74 5b 6e 5d 5d 3d 65 7d 29 29 3b 76 61 72 20 67 2c 6d 3d 7b 70 72 6f 70 65 72 74 79 63 68 61 6e 67 65 3a 21 30 Data Ascii: "UIEvents"]=["keyup","keydown","keypress"],p.MouseEvents="click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave".split(" "),e(p,(function(e,t){if(t.length)for(var n=0,r=t.length;n<r;n++)h[t[n]]=e}));var g,m={propertychange:!0
2024-10-25 09:23:15 UTC	3	IN	Data Raw: 2c 6f 3a Data Ascii: ,o:
2024-10-25 09:23:15 UTC	16383	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 2e 6f 7d 7d 7d 28 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 22 2c 53 2e 53 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 43 6f 75 6e 74 22 2c 53 2e 53 2e 71 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 22 2c 53 2e 53 2e 56 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 69 73 49 6e 69 74 69 61 6c 22 2c 53 2e 53 2e 59 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 72 65 67 69 73 74 65 72 44 65 70 65 6e 64 65 6e 63 79 22 2c 53 2e 53 2e 63 63 29 2c 53 2e 62 28 22 69 67 6e 6f 72 Data Ascii: function(){if(n)return n.o}}}(),S.b("computedContext",S.S),S.b("computedContext.getDependenciesCount",S.S.qa),S.b("computedContext.getDependencies",S.S.Va),S.b("computedContext.isInitial",S.S.Ya),S.b("computedContext.registerDependency",S.S.cc),S.b("ignor
2024-10-25 09:23:15 UTC	16383	IN	Data Raw: 6d 2e 76 62 28 65 2c 72 29 2b 22 7d 7d 7d 22 3b 73 3d 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 24 63 6f 6e 74 65 78 74 22 2c 22 24 65 6c 65 6d 65 6e 74 22 2c 75 29 2c 6f 3d 69 5b 61 5d 3d 73 7d 72 65 74 75 72 6e 20 6f 28 74 2c 6e 29 7d 63 61 74 63 68 28 63 29 7b 74 68 72 6f 77 20 63 2e 6d 65 73 73 61 67 65 3d 22 55 6e 61 62 6c 65 20 74 6f 20 70 61 72 73 65 20 62 69 6e 64 69 6e 67 73 2e 5c 6e 42 69 6e 64 69 6e 67 73 20 76 61 6c 75 65 3a 20 22 2b 65 2b 22 5c 6e 4d 65 73 73 61 67 65 3a 20 22 2b 63 2e 6d 65 73 73 61 67 65 2c 63 7d 7d 7d 29 2c 53 2e 67 61 2e 69 6e 73 74 61 6e 63 65 3d 6e 65 77 20 53 2e 67 61 2c 53 2e 62 28 22 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 22 2c 53 2e 67 61 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 Data Ascii: m.vb(e,r)+"}}}";s=new Function("$context","$element",u),o=i[a]=s}return o(t,n)}catch(c){throw c.message="Unable to parse bindings.\nBindings value: "+e+"\nMessage: "+c.message,c}}}),S.ga.instance=new S.ga,S.b("bindingProvider",S.ga),function(){function e(
2024-10-25 09:23:15 UTC	16383	IN	Data Raw: 65 74 22 29 26 26 6e 2e 68 61 73 28 22 76 61 6c 75 65 22 29 2c 64 3d 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 49 6e 63 6c 75 64 65 44 65 73 74 72 6f 79 65 64 22 29 3b 74 3d 7b 7d 3b 76 61 72 20 66 2c 70 3d 5b 5d 3b 6c 7c 7c 28 73 3f 70 3d 53 2e 61 2e 4d 62 28 72 28 29 2c 53 2e 77 2e 4d 29 3a 30 3c 3d 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 26 26 70 2e 70 75 73 68 28 53 2e 77 2e 4d 28 65 2e 6f 70 74 69 6f 6e 73 5b 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 5d 29 29 29 2c 63 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 2e 6c 65 6e 67 74 68 26 26 28 63 3d 5b 63 5d 29 2c 66 3d 53 2e 61 2e 6a 62 28 63 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 7c 7c 65 3d 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 3d 65 7c 7c 21 Data Ascii: et")&&n.has("value"),d=n.get("optionsIncludeDestroyed");t={};var f,p=[];l\|\|(s?p=S.a.Mb(r(),S.w.M):0<=e.selectedIndex&&p.push(S.w.M(e.options[e.selectedIndex]))),c&&("undefined"==typeof c.length&&(c=[c]),f=S.a.jb(c,(function(e){return d\|\|e===a\|\|null===e\|\|!
2024-10-25 09:23:15 UTC	16383	IN	Data Raw: 72 6e 20 69 7c 7c 28 69 3d 74 2e 74 65 78 74 28 29 7c 7c 22 22 2c 69 3d 6c 2e 74 65 6d 70 6c 61 74 65 28 6e 75 6c 6c 2c 22 7b 7b 6b 6f 5f 77 69 74 68 20 24 69 74 65 6d 2e 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 7d 7d 22 2b 69 2b 22 7b 7b 2f 6b 6f 5f 77 69 74 68 7d 7d 22 29 2c 74 2e 64 61 74 61 28 22 70 72 65 63 6f 6d 70 69 6c 65 64 22 2c 69 29 29 2c 74 3d 5b 6e 2e 24 64 61 74 61 5d 2c 6e 3d 6c 2e 65 78 74 65 6e 64 28 7b 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 3a 6e 7d 2c 72 2e 74 65 6d 70 6c 61 74 65 4f 70 74 69 6f 6e 73 29 2c 28 6e 3d 6c 2e 74 6d 70 6c 28 69 2c 74 2c 6e 29 29 2e 61 70 70 65 6e 64 54 6f 28 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2c 6c 2e 66 72 61 67 6d 65 6e 74 73 3d 7b 7d 2c 6e 7d 2c 74 68 69 Data Ascii: rn i\|\|(i=t.text()\|\|"",i=l.template(null,"{{ko_with $item.koBindingContext}}"+i+"{{/ko_with}}"),t.data("precompiled",i)),t=[n.$data],n=l.extend({koBindingContext:n},r.templateOptions),(n=l.tmpl(i,t,n)).appendTo(o.createElement("div")),l.fragments={},n},thi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49755	13.107.246.45	443	4228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:23:16 UTC	658	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 09:23:16 UTC	775	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:23:16 GMT Content-Type: text/css Content-Length: 20400 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 25 Sep 2024 21:42:27 GMT ETag: 0x8DCDDAAF34D1A25 x-ms-request-id: f5a44cdc-501e-0007-6946-269098000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241025T092316Z-16849878b78625wls3r8psr7u000000000p00000000043rh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:23:16 UTC	15609	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 7d 6b 93 db 36 b2 e8 77 ff 0a ee a4 52 eb c9 4a 8c 48 3d 47 53 49 ad e3 78 93 39 c7 af b2 9d 7d 54 2a b5 c5 91 a8 11 8f 29 51 97 a4 66 3c ab a3 ff 7e f1 46 03 68 90 d4 78 b2 d9 7b 2b eb 8d 2d a2 1b 0d a0 d1 68 a0 81 6e e0 eb af fe 10 3c 2f 76 f7 65 76 b3 ae 83 a7 cf cf 83 57 d9 a2 2c aa 62 55 93 f4 72 57 94 49 9d 15 db 30 78 96 e7 01 43 aa 82 32 ad d2 f2 36 5d 86 c1 57 5f 7f fd d5 1f 9e f4 bb ff 2f 78 ff e1 d9 bb 0f c1 9b bf 04 1f 7e bc 7a f7 7d f0 96 7c fd 23 78 fd e6 c3 d5 f3 17 41 67 2a 4f 9e 7c 58 67 55 b0 ca f2 34 20 ff 5e 27 55 ba 0c 8a 6d 50 94 41 b6 5d 88 5a a7 55 b0 21 7f 97 59 92 07 ab b2 d8 04 f5 3a 0d 76 65 f1 3f e9 82 b4 21 cf aa 9a 64 ba 4e f3 e2 2e 78 4a c8 95 cb e0 6d 52 d6 f7 c1 d5 db f3 30 f8 40 70 0b d2 Data Ascii: }k6wRJH=GSIx9}T)Qf<~Fhx{+-hn</vevW,bUrWI0xC26]W_/x~z}\|#xAgO\|XgU4 ^'UmPA]ZU!Y:ve?!dN.xJmR0@p
2024-10-25 09:23:16 UTC	4791	IN	Data Raw: 8b 88 bd ac 2c 12 31 2f 2a 2b 24 e5 a1 95 75 9e df 51 bb 5f 6a 19 63 dc bc c9 45 89 b5 70 47 5d 70 ca fb 9e 0e 20 56 49 be 20 69 14 01 46 49 a3 08 a2 a9 10 de 51 33 ab ab 42 ad 3a 03 51 82 c9 86 58 21 80 b6 66 35 88 5b 0b 1a d2 44 af 18 0e 06 e3 65 32 71 db a4 25 ce 20 03 a5 0f 01 b4 b6 c9 2f 95 2d 68 58 9b 7c d2 ca db f4 30 61 ec 73 a7 f6 1e b8 a8 5b 0e 36 f1 85 8e 36 04 a6 86 1b 02 93 e3 0d 14 66 70 df 93 6e 56 08 83 b4 76 40 43 45 db f0 b0 2e 10 57 99 1b 46 0a 7a 9a 6c 5e eb 5b 91 85 43 fa 34 bc 98 9d 23 97 02 03 20 96 48 ba 89 37 5f 87 50 e3 87 e3 60 22 80 5b d9 23 19 93 28 7f 18 bb 0c ee 13 f6 9e b3 cc 4f 7d b0 93 e5 be fa 81 1c e1 db 81 87 f8 c3 85 9e 97 26 d9 ad e4 e2 f9 d0 f9 26 d9 66 bb 7d ce d8 eb 5e a9 2b 2e 5f 31 9e 3c 14 8e 66 b6 29 6a 84 19 Data Ascii: ,1/*+$uQ_jcEpG]p VI iFIQ3B:QX!f5[De2q% /-hX\|0as[66fpnVv@CE.WFzl^[C4# H7_P`"[#(O}&&f}^+._1<f)j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49754	13.107.246.45	443	4228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:23:16 UTC	654	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 09:23:16 UTC	797	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:23:16 GMT Content-Type: application/x-javascript Content-Length: 16326 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Aug 2024 20:17:04 GMT ETag: 0x8DCC6D537C7BF24 x-ms-request-id: cd7b2a5a-901e-0008-7a31-26e6f4000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241025T092316Z-r197bdfb6b4bq7nf8mnywhn9e000000001fg000000000x2r x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:23:16 UTC	15587	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dd 7d 4d 73 23 c7 92 d8 dd bf 02 0f cf f1 86 5c f5 40 f8 e0 27 46 d0 18 04 c0 19 ec 90 00 04 80 43 29 24 19 d1 04 8a 60 bf 01 ba b1 dd 8d e1 f0 51 e3 78 37 1f f6 e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 d6 bf c3 f9 51 55 5d d5 dd 00 c8 91 56 6f d7 0a c5 10 dd f5 95 95 95 95 95 99 95 99 fd 87 db b5 3f 8d bd c0 df 13 fb 8f ea 77 21 d8 f3 f7 1f bd db 3d ef 47 ff e7 fd 50 c4 eb d0 2f e0 ef 92 f8 b4 0a c2 38 7a f5 d1 0d 0b 71 03 5f 35 1e e5 bb fa e3 67 c7 9b d5 7d 67 11 b8 33 31 ab ff a1 f2 f9 95 6c 2a b0 e9 d4 5d 2c f6 62 d5 83 13 3b c9 ef 60 1f 1e b8 59 e3 0f e5 a4 e0 33 0e e3 35 1e 75 47 41 69 d9 10 4e 50 9a 36 3c f8 77 d5 28 16 9d 60 af bc ff 79 ef c7 64 1a 4e e0 78 00 fc 5e 75 9f a0 f4 1b de 5e 05 fa 87 3f 87 fb 4e 08 7f 8e f6 Data Ascii: }Ms#\@'FC)$`Qx7}'}?e#QU]Vo?w!=GP/8zq_5g}g31l*],b;`Y35uGAiNP6<w(`ydNx^u^?N
2024-10-25 09:23:16 UTC	739	IN	Data Raw: 30 e4 dc 87 8c f2 c0 f5 c3 79 67 55 de 72 6e 30 47 45 07 e2 e0 a1 a2 03 90 e8 a9 c6 72 0b fd 96 e1 b7 f4 fb 30 27 7d 00 6e 0b 06 59 a2 2f a7 1c 41 90 d7 5b 39 85 15 c9 af 0c df e0 d5 1a c3 7b 00 1d 0f 96 cc 31 14 f8 fd 00 92 38 f0 07 26 68 1f 8a 8f 02 83 09 f8 cc cc 8d 10 e1 e4 34 aa 0f 19 70 c2 8e cc 1c 39 82 4b ab 1f 9a f8 7d 5e 19 dd 82 51 6d 02 c8 68 0d cb 82 19 3d e0 68 3d 30 aa b2 07 f1 03 a3 85 32 be c1 a2 68 3c 24 e9 d6 00 eb 78 77 f8 c7 f3 e6 f9 e9 f9 49 d1 16 aa f8 dc e2 69 8e a0 fd 42 2a 87 f5 62 64 3c c1 2e c0 ac c9 aa 68 99 3c f0 39 1d 83 58 1d 4b 3a 00 96 ae dc 70 b4 e4 a7 ce 65 58 05 b4 fb 8e bc bf 10 3f 36 46 40 70 c5 0c 77 b9 d3 3a eb 0f b1 16 fb 6f 13 4b 51 87 90 96 0d 41 58 63 98 25 73 3f 2c 27 3c fd b0 42 76 1c 0c 01 29 d3 64 e9 c3 21 Data Ascii: 0ygUrn0GEr0'}nY/A[9{18&h4p9K}^Qmh=h=02h<$xwIiB*bd<.h<9XK:peX?6F@pw:oKQAXc%s?,'<Bv)d!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49753	13.107.246.45	443	4228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:23:16 UTC	635	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_DQTmGfOEMmPUR-Vehc8U6Q2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 09:23:16 UTC	792	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:23:16 GMT Content-Type: application/x-javascript Content-Length: 122065 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 18 Sep 2024 23:43:27 GMT ETag: 0x8DCD83BB1CF3887 x-ms-request-id: 6e2b78a3-f01e-0022-113c-250649000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241025T092316Z-r197bdfb6b4hsj5bywyqk9r2xw00000001qg0000000057qa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:23:16 UTC	15592	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 7b 57 e3 48 92 38 fa ff fd 14 46 33 97 b6 1b 61 2c bf b0 45 ab 59 63 a0 8a 69 c0 0c 86 ea 9e a5 18 8e 2c a5 8d 1a 59 f2 4a 32 8f 31 de cf fe 8b 88 cc 94 52 b6 4c 55 cd ee b9 f7 dc 73 e7 41 59 99 91 af c8 c8 c8 88 c8 c8 c8 bd 9f b7 fe af d2 cf a5 dd ef ff 4f 69 78 d3 bb be 29 0d 4e 4b 37 9f cf ae 8f 4b 57 f0 f5 8f d2 e5 e0 e6 ac 7f f2 fd f5 60 a3 f8 ff 9b 47 2f 2e 8d 3d 9f 95 e0 df 91 1d 33 b7 14 06 a5 30 2a 79 81 13 46 b3 30 b2 13 16 97 a6 f0 37 f2 6c bf 34 8e c2 69 29 79 64 a5 59 14 fe c9 9c 24 2e f9 5e 9c 40 a1 11 f3 c3 97 52 19 aa 8b dc d2 95 1d 25 6f a5 b3 ab 4a 15 ea 67 50 9b 37 f1 02 28 ed 84 b3 37 f8 fd 98 94 82 30 f1 1c 56 b2 03 97 6a f3 e1 23 88 59 69 1e b8 2c 2a bd 3c 7a ce 63 e9 c2 73 a2 30 0e c7 49 29 62 0e Data Ascii: {WH8F3a,EYci,YJ21RLUsAYOix)NK7KW`G/.=30yF07l4i)ydY$.^@R%oJgP7(70Vj#Yi,<zcs0I)b
2024-10-25 09:23:16 UTC	16384	IN	Data Raw: e9 a7 cc cf bf 13 ee c2 50 56 0b cd 18 7b 2a 73 e5 15 27 0c 2d 64 d3 19 de ce e0 ee 25 56 d1 9e 03 3c 05 00 07 d9 60 58 56 61 e5 1b 26 a7 83 cc be e1 49 4f dc 8f a6 4d 47 13 80 81 26 00 a1 f2 83 f4 2d 2e fc 66 33 16 af 94 43 fd 1d 3d 50 40 61 3a b6 a3 a7 ec 6a 3e fa 7e e6 bc e3 8e d0 67 8b fc 0d f1 c6 c1 6a ee ef e8 bb a5 e4 ae d5 67 d9 28 36 a1 3f 2b 5d d3 b8 c4 2b cd b0 87 54 5d 80 ca 52 12 5d a1 5b 58 e3 d1 06 17 3d 66 45 d5 22 57 c8 72 e5 a3 7e 0b bf 33 dc 46 3f 1a 80 70 44 43 b0 25 1a 95 bc aa 23 67 3a 86 45 87 01 e3 60 9b d6 6c 0a 22 81 e1 1c 77 3d 1c 00 f7 f1 0c 7d 4d 5f 3c 7b ec 05 6d 83 be b9 e0 2b e9 4b 9a 50 b4 ba bd 75 9e 89 7a 9e 08 7b 81 88 89 0b 6f 5e 70 d5 24 80 7c f4 b8 5e 66 17 2c 90 d1 e0 4c 27 e4 a3 88 96 43 a0 35 59 9f 99 94 1b ad 46 Data Ascii: PV{*s'-d%V<`XVa&IOMG&-.f3C=P@a:j>~gjg(6?+]+T]R][X=fE"Wr~3F?pDC%#g:E`l"w=}M_<{m+KPuz{o^p$\|^f,L'C5YF
2024-10-25 09:23:16 UTC	16384	IN	Data Raw: 38 39 d1 20 4e d0 1a bc 0b b9 32 bc f9 3d b1 71 12 23 a6 f9 8d 48 2b 02 99 f7 c9 fb c0 79 12 b1 ff 81 2b 67 3a fd ea 7d 38 de 3d 38 7c 43 e6 50 dc cf d5 19 56 80 8a 7a 2c f3 52 d5 bd 39 55 e5 89 4d b4 18 e9 a7 40 09 16 ad 51 d2 c3 74 7a 26 e6 46 41 dd 43 dc 4d 99 80 37 30 18 8b c9 88 a9 4f 44 26 9c 90 c3 b8 17 21 11 70 4b 28 8d b6 f0 23 a4 33 e4 79 a3 6e f6 11 61 29 9d b9 e0 0d 16 c3 66 e0 f7 01 f6 52 be b2 c1 35 a4 d6 5d d9 e0 ce 9c c6 55 9a f0 51 d2 59 cb 76 cf 2b 16 41 2b 4c 28 98 5a 94 79 55 cf d2 89 5e 8c 03 6e e8 73 9a 57 b1 b8 68 a5 0a d4 44 c6 ce 1b b3 ba da e6 e1 b6 31 cc 5d f4 1e ce 34 80 c8 83 ec 03 eb 9f 53 23 e5 95 9c 37 94 1d ad 5c 4d 35 6a eb 4e dc 85 ba 36 76 00 d3 67 3a 47 db 5d a6 2b 17 aa f7 cd 76 ea ef 6f ed e5 44 0e 59 e9 36 22 23 41 Data Ascii: 89 N2=q#H+y+g:}8=8\|CPVz,R9UM@Qtz&FACM70OD&!pK(#3yna)fR5]UQYv+A+L(ZyU^nsWhD1]4S#7\M5jN6vg:G]+voDY6"#A
2024-10-25 09:23:16 UTC	16384	IN	Data Raw: f7 2c 0c 48 89 2c cf 87 51 59 16 ed c9 8c 37 28 36 61 5b e3 44 fa 5e 46 3f 4b 8a 46 fe c1 7e c2 cd 84 47 e0 eb 38 ce b5 86 e2 6f b0 cd 33 b4 ad 10 5f 27 05 38 f4 7b 32 c6 50 53 f1 5d 5c d6 9d a3 21 b8 a9 3b 6e 5b c9 e4 ae 1b 8d 75 71 2f 8c cd 47 5c 9f 42 ca a2 67 ff 34 48 84 d4 0a 69 ea f7 e8 5a 02 9e 88 1a 6c 39 ed c0 cb 9f a4 79 3c 78 fc 7c 13 25 6c 06 98 9d e6 e9 08 ca a4 9d d0 8f 31 a2 4d d7 ae 51 6a c0 d8 23 ae 50 26 99 b9 64 74 06 d8 7a 8d 0a 57 93 3c e0 55 74 93 7e 94 55 7e 6c b0 44 02 95 db 10 a5 0a 7b e8 f8 3c 6b 00 11 da 20 e1 55 e3 47 f4 1b f4 a3 0b 78 42 2f 9c e0 53 9b 37 e2 ac 81 12 5c e5 f3 1f 11 2f b6 15 a7 56 c3 61 23 1d c0 f4 50 be 2a cc c9 3d 52 fc 79 df 25 7b d0 f7 c2 ea db 98 9a 5a e6 18 5d 71 54 99 c8 38 99 18 21 67 82 4a 35 e4 59 4f Data Ascii: ,H,QY7(6a[D^F?KF~G8o3_'8{2PS]\!;n[uq/G\Bg4HiZl9y<x\|%l1MQj#P&dtzW<Ut~U~lD{<k UGxB/S7\/Va#P*=Ry%{Z]qT8!gJ5YO
2024-10-25 09:23:16 UTC	16384	IN	Data Raw: 91 75 61 f9 66 51 6b 93 14 90 9f e9 f3 6c 54 c4 f9 0d e7 db e0 51 e8 3f d3 7e 68 f0 8b 47 26 24 3a e0 2b fa 20 19 ae 34 a7 8f a0 51 e3 9f f3 eb c8 a9 49 43 89 84 d0 d3 18 db 9a 61 69 b6 a3 b2 ea 0a 46 c8 fa 4b a7 23 4b 90 e6 40 1a a7 ce a6 66 cf 2b aa af 16 9e 81 12 34 0f 94 f0 b7 72 1b 02 51 90 d3 d0 c1 67 de 6e ef 92 c6 fd 27 51 14 8d 80 df 01 bb 1c 24 62 06 6e ce bc 93 06 c6 a1 79 08 33 09 1c a1 cd 52 48 89 15 66 90 a1 d8 43 38 8c 4a 94 61 56 d3 29 6e 32 62 39 51 75 09 93 31 45 b4 89 a7 cf f7 a5 cc 6a 26 8f 36 38 8f 8b 10 09 05 77 16 80 6e 03 6d 15 98 75 ea 11 af 2d e4 7b 0c 5d bf 1c 3a 48 bf c1 88 c7 d5 47 ba bd 02 24 4c 16 54 34 ed 88 93 4d db 84 b4 f3 54 14 84 21 3a 6c a8 51 9c fb 52 d2 11 4b 04 52 18 24 9e 93 d6 d4 00 85 db ed 81 9f f6 0b f4 49 22 Data Ascii: uafQklTQ?~hG&$:+ 4QICaiFK#K@f+4rQgn'Q$bny3RHfC8JaV)n2b9Qu1Ej&68wnmu-{]:HG$LT4MT!:lQRKR$I"
2024-10-25 09:23:16 UTC	16384	IN	Data Raw: 86 9c fc d4 49 c0 6e 02 df 17 79 12 c5 41 90 60 c2 b2 24 0a 93 24 c9 03 0e 2e b1 93 6e 6a 09 95 da 20 a1 dc 71 05 28 36 f7 12 db 4f dc c0 c3 70 82 44 e4 81 cd b2 db 79 9f d6 3a 4b 63 87 b3 c8 e5 81 ab fe f5 3d c6 41 54 49 9c fb 36 90 c2 71 6f e7 b0 5b ed 26 34 3c 22 8b c0 b5 f3 0c 5c 55 da a1 0d 4e 21 63 2f 10 21 b3 99 f0 79 bc 1b e2 0d d3 84 87 c2 06 17 b5 85 4c 32 70 54 b0 a1 1c ac 1d 8b 17 fa 91 08 76 d3 4d 64 70 cf 0d 44 e4 b1 cc 8d 5d 48 29 28 80 52 84 60 b5 79 c4 02 60 63 b0 9b 09 8c 52 6e 47 61 94 b9 99 eb db b9 4c ec 50 e4 1c 26 6c 00 6e 2e 92 c8 f1 77 83 0e b1 f1 7c 66 42 46 1c dc 2f 73 9c 50 46 49 c8 59 1e b8 0c d6 1c 0f 02 2f dc 0d 3d c5 29 f7 a4 e3 e7 59 1e 63 02 9d 0c eb 93 f0 c8 16 b1 2f 49 bc c7 d1 6e c6 54 2b 62 a9 e3 04 d2 b7 5d f0 f0 8c Data Ascii: InyA`$$.nj q(6OpDy:Kc=ATI6qo[&4<"\UN!c/!yL2pTvMdpD]H)(R`y`cRnGaLP&ln.w\|fBF/sPFIY/=)Yc/InT+b]
2024-10-25 09:23:16 UTC	16384	IN	Data Raw: 36 d9 e5 4f 3e 43 75 3a a5 ae da d0 ea 95 e1 cb cf bb f7 e8 a8 fc bd cf 9b 00 81 b6 4b b6 7e f9 63 33 41 cb 82 9b 55 92 ef 18 7f ab 95 71 25 c9 da 7b 09 4b 99 df 29 f2 9b a9 37 9f 37 63 8e aa 7f ce 1f 96 42 3e 2f 30 e9 f5 ae d8 56 e6 4b d3 dc ef a4 fc fc 8b 22 21 84 dc a7 eb cf be 2e fd e7 5f 6a 66 1e ad 72 e1 e5 eb 2f 2c 3b be ac 17 77 6b 8a be 15 25 fd f6 ba bd f6 ec 13 57 f8 4d 11 5c 4b 2f a5 da 7f 65 68 7d 2b b5 7e 56 b1 5c a6 b7 d1 ee eb aa b7 57 f2 b7 55 a2 6f a7 66 16 d5 4b 76 4e 12 77 ae 34 e4 9f aa a2 53 7d fd f3 2d 48 f0 eb 91 ce bb 94 8a 5f 95 bf e0 96 2e 3d 49 f1 63 cf e6 27 6c 56 fb 57 3a bc 43 8b 4c 72 ee 1d cd 6e e7 d5 ab 54 07 fb 65 ab 87 5d 71 89 3f ba 87 e7 96 1e 1c ba 5c 4d 9d 1d 98 9f ad 2f d8 15 cc fe fa 1a 0b f5 40 01 58 4d 17 5f 98 Data Ascii: 6O>Cu:K~c3AUq%{K)77cB>/0VK"!._jfr/,;wk%WM\K/eh}+~V\WUofKvNw4S}-H_.=Ic'lVW:CLrnTe]q?\M/@XM_
2024-10-25 09:23:16 UTC	8169	IN	Data Raw: 18 66 2f ae 5c 7c e2 cb 27 71 7c 3e a7 f8 64 2e 9e 3c 27 1e 75 61 3c f8 ec 4a 3c 3b 11 28 cc 31 d5 00 f5 a6 c3 86 c3 90 fc 69 02 ff 26 06 3c 78 03 84 40 93 83 34 8d bd 10 69 1f 40 02 8b c0 01 fe 9a 99 b9 02 6c 30 7c 23 22 21 89 68 59 8c 6c cf f1 0d 70 50 cd 3b 4e 15 97 02 08 78 98 cc 91 0c cf 0f f9 8c 4e a2 f9 f5 49 84 e5 df 80 36 02 83 71 b5 85 11 7a 27 91 44 2e a4 e7 47 8f 38 5c 11 ab 3e 52 79 4a 21 62 e0 1a 9f 94 56 4e 82 00 8f 24 05 e1 bc a4 24 89 d0 27 c0 b8 60 2b ff 3e 22 57 d9 85 cc 2c fe cc 98 b1 79 8a b0 e8 2f 0f e1 c9 21 87 d9 0b b4 7f 95 9a 7a 4d 3f 33 1f 78 c1 d8 92 5e fc 23 a7 49 9c 3a e7 62 c0 6c c5 42 e0 5c de 2f 8c 2f e2 e7 01 f1 c5 92 7c 96 ab 17 27 e7 71 96 9b 91 af d9 e8 de c1 9e 7a ec 1b 1f d9 0f 81 b3 be f1 86 fd 84 0a 9f 49 e2 03 b4 Data Ascii: f/\\|'q\|>d.<'ua<J<;(1i&<x@4i@l0\|#"!hYlpP;NxNI6qz'D.G8\>RyJ!bVN$$'`+>"W,y/!zM?3x^#I:blB\//\|'qzI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49758	13.107.246.45	443	4228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:23:17 UTC	649	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 09:23:18 UTC	738	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:23:17 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: 0ae22b8d-d01e-006b-4f3a-257b0f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241025T092317Z-r197bdfb6b4tq6ldv3s2dcykm800000002v000000000aw8x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:23:18 UTC	15646	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-10-25 09:23:18 UTC	1528	IN	Data Raw: 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49759	13.107.246.45	443	4228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:23:17 UTC	618	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 09:23:18 UTC	813	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:23:17 GMT Content-Type: application/x-javascript Content-Length: 116365 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:54 GMT ETag: 0x8DCBD5317046A2F x-ms-request-id: 5669326d-c01e-0005-4cb6-252e20000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241025T092317Z-16849878b78x6gn56mgecg60qc000000025g0000000052ku x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:23:18 UTC	15571	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 6b 5b db 48 b6 28 fc 7d ff 0a 5b bb c7 2d b5 0b 63 19 30 44 46 78 48 42 7a 98 49 02 07 c8 f4 f4 10 4f 1e 61 97 b1 12 23 79 74 e1 d2 d8 fb b7 bf 6b ad aa 92 4a b2 0c 26 dd fb 9c 0f ef f4 d3 c1 ba 94 ea 5e eb 7e d9 fc a9 fe 5f b5 9f 6a 1b eb ff 57 3b bf 38 3c bb a8 9d bc ab 5d fc e5 f8 ec 6d ed 14 ee 7e ad 7d 3c b9 38 7e 73 b4 7e 3d d8 28 fe bb 98 f8 71 6d ec 4f 79 0d 7e af bc 98 8f 6a 61 50 0b a3 9a 1f 0c c3 68 16 46 5e c2 e3 da 0d fc 8d 7c 6f 5a 1b 47 e1 4d 2d 99 f0 da 2c 0a bf f2 61 12 d7 a6 7e 9c c0 47 57 7c 1a de d5 4c a8 2e 1a d5 4e bd 28 79 a8 1d 9f 5a 2d a8 9f 43 6d fe b5 1f c0 d7 c3 70 f6 00 d7 93 a4 16 84 89 3f e4 35 2f 18 51 6d 53 b8 09 62 5e 4b 83 11 8f 6a 77 13 7f 38 a9 7d f0 87 51 18 87 e3 a4 16 f1 21 f7 6f Data Ascii: k[H(}[-c0DFxHBzIOa#ytkJ&^~_jW;8<]m~}<8~s~=(qmOy~jaPhF^\|oZGM-,a~GW\|L.N(yZ-Cmp?5/QmSb^Kjw8}Q!o
2024-10-25 09:23:18 UTC	16384	IN	Data Raw: c6 f1 60 48 76 39 a2 ca 7d 0a c4 6c 46 7b 28 72 48 0c 1b 29 1f 49 83 69 74 84 3e 47 59 80 42 9b b2 59 ca d8 88 5e 36 a7 24 f7 af 17 38 0d 53 1c 3e 97 dc 17 24 8a 0d 4a a7 01 95 4d e2 5c ba e4 61 91 1d cc fc 76 23 bb 17 d9 47 55 e3 fb 1d 24 72 d5 75 be 53 62 b7 c3 d2 4d f8 e3 e1 9f 08 fe 94 d8 cb 4c b2 60 93 73 a2 08 7c dd c2 cc 73 9f 8e 83 c4 ee be 3e 32 f9 4f b1 b5 a0 9d 4a e3 1e bb 1b c2 d1 c8 77 a3 9e bf 9f 52 28 74 4a 36 90 30 df 82 5a d0 d6 7a 03 ab 1b c3 71 f0 37 c6 a2 a7 e2 09 4c c4 d8 f5 2d 06 8f 9b b6 66 12 5d 1b ff 14 d3 96 df 40 63 44 2c e6 6f b8 f8 2d c3 e6 72 5b e7 a8 e9 1d a4 c2 f9 71 c3 23 61 49 cf 47 27 27 7f 63 23 57 e2 4e 51 f5 3a 81 a7 93 7d af 37 d1 7a d7 44 92 9b fa 37 81 4e 4d 11 fd 88 ec b6 68 ac 96 e7 17 55 b3 97 4f d5 55 ce e4 46 Data Ascii: `Hv9}lF{(rH)Iit>GYBY^6$8S>$JM\av#GU$ruSbML`s\|s>2OJwR(tJ60Zzq7L-f]@cD,o-r[q#aIG''c#WNQ:}7zD7NMhUOUF
2024-10-25 09:23:18 UTC	16384	IN	Data Raw: d6 d6 bf a7 c9 82 82 ed 58 a9 a7 1e 3e d1 2c 29 8c 92 ca 92 96 69 33 da 9c 35 38 fc d6 d6 60 90 eb 41 a0 12 7b 42 d2 a3 7c 11 42 9b 34 a2 89 fa ac 50 54 6d 90 84 ac 5a 8e c0 f6 f8 15 ad ba d6 15 90 17 54 c3 6f b0 8f f9 f7 1b 9e 4f e9 71 33 74 f5 c0 fd e6 30 a7 21 7d a1 5d 47 f8 42 c3 4d be f3 4f 41 ba 44 02 66 76 07 a0 26 a7 28 74 99 e0 3b c9 b0 c7 62 54 65 49 f7 30 01 73 38 73 93 6f be 83 38 82 66 ee ce ce 1e 6e 0d f8 b1 f5 0c 45 5a dc 2d bb 1e b9 c6 a8 1c a5 3d e7 d3 a7 01 cc 63 fd e7 fc 53 3e 06 6a 35 fc f4 09 4b f4 c5 6e dd 03 86 b1 25 2e c8 49 20 ba c1 d7 11 55 f4 05 62 8b c7 b5 5e f7 e2 9e ef 6c 35 b7 f6 9a 6d 87 5d 61 90 56 d2 75 a6 25 9c a5 be 73 39 49 2f c2 89 c3 06 e9 f4 2e 8b 2f c7 85 ef 7c bc 0d 9f ad 6c b6 da db eb 9b ad cd ed 95 17 51 82 39 Data Ascii: X>,)i358`A{B\|B4PTmZToOq3t0!}]GBMOADfv&(t;bTeI0s8so8fnEZ-=cS>j5Kn%.I Ub^l5m]aVu%s9I/./\|lQ9
2024-10-25 09:23:18 UTC	16384	IN	Data Raw: a4 ca a6 93 a3 67 05 69 b4 c6 7e c4 d9 e3 39 43 68 1e b4 61 d1 c2 e6 08 96 6a d0 1c 75 d2 c3 bc a3 a2 68 ef 40 82 32 1c 1c 7b 39 fa ab 83 34 35 ee 0e dd d2 bd c6 a3 e3 da f3 7c fa 79 15 5c ca 3e 2f 40 6c be 3a bc e8 78 20 98 f4 2e e0 1d e4 fd 56 63 77 ca ae d9 1d 3a bf 64 68 0d bf 86 7f 8c a4 17 fe f8 eb 7d 5b d4 06 df ab e2 2b 59 bc 90 fa 71 8c 6d 52 7e a4 58 f9 fa 23 e9 ab 86 4c d4 b9 ba f0 c4 a4 6a a5 37 fb c1 26 5b c5 f2 30 9b 42 1c ab 21 ec 3a 8a cc 58 07 52 57 12 27 53 82 ac c7 c9 ad f0 1a cb f1 c6 54 45 5c 89 e4 5c bd 7e 67 7a 48 3c 46 dc 1b 4a 50 ba e3 2e 79 86 a5 3e ca 8a 99 87 ca 6b 17 98 cf 6e 0f 3e 00 68 d3 f7 f1 5f 4f 3b 19 98 1a 87 7b c1 08 f8 63 17 4f 7f ce 0c e0 45 fb 8b 27 9e ee 44 80 27 ce ab 3e 29 12 46 c4 b8 b4 78 ad c9 f6 06 5c b6 37 Data Ascii: gi~9Chajuh@2{945\|y\>/@l:x .Vcw:dh}[+YqmR~X#Lj7&[0B!:XRW'STE\\~gzH<FJP.y>kn>h_O;{cOE'D'>)Fx\7
2024-10-25 09:23:18 UTC	16384	IN	Data Raw: 41 1f ce 63 f8 7c 38 cb 6e 62 8c 3e 56 eb 18 50 d0 d5 39 aa fa b8 ea f0 0c 5e b3 3c ed 39 82 c4 c7 f0 e9 f8 a9 11 fd ee 03 1a 02 ec ec bc 1e bd 0c cf 82 8f 18 b1 2f f9 88 f8 f5 23 27 ed f9 c8 49 92 e1 1d 56 8c 6e 6f f1 cf 94 ff 2c 77 76 ec 2f 77 7a 98 3c 16 d9 f0 ed 93 db db 13 5b d5 13 9e a8 98 80 40 5f 4f 91 e3 3d 11 94 39 fa 19 ba 7f ca ac ef 0d d6 09 1c 92 46 38 e2 5f c7 49 80 9e 8b 38 eb 6c 85 09 b4 62 9d 5b 1d 47 92 f1 80 12 5a 18 ff 2c 54 bd 88 98 d9 ee e6 6f 4b a0 df 82 eb 90 1a 8e 00 5a 51 5c b0 c2 e5 84 de 2e 50 30 f1 df 6e 0c 8b a6 ae c5 6b 1f 27 c6 89 07 4e c3 78 68 cd f9 b4 db 43 45 68 31 f4 4e bb b0 17 d0 fc 82 4d ac e3 d0 7d d5 09 af 3d bd d4 fe 19 1c c3 e9 22 e3 50 a5 b2 47 17 b0 3f bc 0a d5 2e 75 7a b8 4f b2 1e 67 34 d9 4e 63 97 9f 7b d6 Data Ascii: Ac\|8nb>VP9^<9/#'IVno,wv/wz<[@_O=9F8_I8lb[GZ,ToKZQ\.P0nk'NxhCEh1NM}="PG?.uzOg4Nc{
2024-10-25 09:23:18 UTC	16384	IN	Data Raw: 6f 8f 8c 3d a0 b1 ba b9 56 ed db 8d 94 af 1a 74 72 fb 31 53 f0 93 bc 81 d3 83 bc d1 d3 83 6f 9c 02 6a e3 fb cf 03 ef f3 c6 93 51 af 57 f8 d0 5e 5b 41 b8 f6 c6 e1 d5 bf ff 20 b0 d5 6f 1c 43 7a 51 d7 1b c8 5f b4 24 71 d3 9b 0f a9 c9 b3 dd 0b f2 21 90 e4 43 24 09 25 4b 50 0d cf 8c 6f 62 e5 88 72 b3 63 51 46 52 e9 a5 cc 3b 9c 98 a6 0a 38 4d 85 3e df 95 f8 88 93 19 59 81 f6 42 13 0b 3c a8 2b 2c 2d 59 af b6 22 6e 07 b3 d5 11 28 e7 e0 30 d6 1d 1f c9 39 a8 6e 32 07 6f ac 59 1e 59 61 06 62 7c 2e 46 48 49 7c f6 91 70 d4 91 9b 81 f1 18 46 32 48 1c 20 d2 22 15 56 dd 08 24 98 bd d5 e8 1b 4f 8d 4c 62 15 e0 46 85 7d 25 72 e1 38 5e 7e 87 07 db e6 9f 6c e6 7d 32 ab ec c2 0d 57 35 d2 59 01 79 ee 6f 72 13 0d 85 da 8b c2 83 6c d0 0b 34 66 a5 dd 0c f0 9d ab f8 24 00 73 8c 07 Data Ascii: o=Vtr1SojQW^[A oCzQ_$q!C$%KPobrcQFR;8M>YB<+,-Y"n(09n2oYYab\|.FHI\|pF2H "V$OLbF}%r8^~l}2W5Yyorl4f$s
2024-10-25 09:23:18 UTC	16384	IN	Data Raw: 28 6a 74 56 53 66 c5 fe cf 72 5c d8 9f 15 29 63 4d 91 32 d6 52 36 60 5b ac 09 30 f3 65 fb ce f6 e7 38 a2 0d 16 84 de c9 87 1f 4f 4a f8 36 33 60 db bc f3 8d 03 e9 66 d1 90 42 cf a6 8c fd 73 20 33 13 e0 aa f5 a5 40 6e 98 1e 23 65 91 c8 1f 22 65 95 88 25 a6 ed 09 b2 32 48 8d e5 00 61 76 8c 6d 19 c2 5e e8 e8 5e 3a 68 05 64 8e e3 55 ad b0 7d a3 83 90 da 2a 86 89 ff 9d c7 b5 4c 3e b3 9f 90 23 3f b5 f8 ac 9f a3 69 ac a8 c9 d7 f0 d0 a1 31 ea b0 ea 38 1e fd 81 54 43 6a 1c c9 64 bf 17 8b 88 be 28 f5 24 4f 23 ba 05 68 c1 47 42 db e7 a1 13 f6 2b fb 9b 6e 7b fe 7a ee ac 7b ca 26 59 1f ca 92 10 03 1c 99 6d 00 76 75 8c 2b c5 8d 05 8e f2 dd 2e 95 2d ec ca 58 d9 6b fb 4e 66 a6 cd 1d 6c b8 21 f1 95 ff f2 7e 8c bb ce 0d 00 36 ef 3f bd f7 5f 1e 44 1d cd 79 b1 33 af ad 20 dc Data Ascii: (jtVSfr\)cM2R6`[0e8OJ63`fBs 3@n#e"e%2Havm^^:hdU}*L>#?i18TCjd($O#hGB+n{z{&Ymvu+.-XkNfl!~6?_Dy3
2024-10-25 09:23:18 UTC	2490	IN	Data Raw: 76 68 98 bc a0 3f 40 4a 03 1c b3 42 1d 27 14 de 2c 30 3f 34 26 15 78 3c 32 d3 c9 17 b6 63 68 f2 5e 3e ca 38 c7 fa da b4 a6 b7 c9 4e e7 6b eb eb 52 5a e4 a3 63 e0 52 22 d0 e9 eb e5 b4 39 64 8c cb 89 81 6f d5 ca 69 80 28 8f c7 e5 c4 31 24 e6 e5 c4 29 24 a6 e5 c4 89 0f 04 77 29 6d e6 03 81 5d 4a 1b f9 40 80 97 d2 6e 7c 20 c6 4b 69 97 3e 50 1b a5 b4 73 1f 48 9c 52 da 85 0f a4 51 29 ed cc b7 9e 94 d3 ae d0 e1 5d 29 ed da b7 be 2d a7 1d c9 68 79 e3 e3 b4 66 7d f1 b5 ed ac f7 28 1c df ed 02 dd 2b ec 9b 9f eb f4 dd eb 7d 2b 33 dc 1d af db 7d ff f8 89 03 39 df f8 eb ad c1 71 0a 93 ff b5 bd 0e 9f d7 dd 17 14 4f 10 e3 02 ae 47 0f d8 5e 7f 74 4f dd e7 ee a1 fb d6 fd d5 7d e5 be 73 0f 7e 87 46 f4 ed c2 7d 89 4a 7c 59 a6 83 dc bb ef fd 83 56 74 1e 03 cf f7 82 63 43 7f Data Ascii: vh?@JB',0?4&x<2ch^>8NkRZcR"9doi(1$)$w)m]J@n\| Ki>PsHRQ)])-hyf}(+}+3}9qOG^tO}s~F}J\|YVtcC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49761	13.107.246.45	443	4228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:23:17 UTC	429	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 09:23:18 UTC	791	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:23:17 GMT Content-Type: application/x-javascript Content-Length: 16326 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Aug 2024 20:17:04 GMT ETag: 0x8DCC6D537C7BF24 x-ms-request-id: 9d81d4e8-f01e-0053-509a-24dfcf000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241025T092317Z-16849878b785jrf8dn0d2rczaw00000001dg00000000bscg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:23:18 UTC	15593	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dd 7d 4d 73 23 c7 92 d8 dd bf 02 0f cf f1 86 5c f5 40 f8 e0 27 46 d0 18 04 c0 19 ec 90 00 04 80 43 29 24 19 d1 04 8a 60 bf 01 ba b1 dd 8d e1 f0 51 e3 78 37 1f f6 e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 d6 bf c3 f9 51 55 5d d5 dd 00 c8 91 56 6f d7 0a c5 10 dd f5 95 95 95 95 95 99 95 99 fd 87 db b5 3f 8d bd c0 df 13 fb 8f ea 77 21 d8 f3 f7 1f bd db 3d ef 47 ff e7 fd 50 c4 eb d0 2f e0 ef 92 f8 b4 0a c2 38 7a f5 d1 0d 0b 71 03 5f 35 1e e5 bb fa e3 67 c7 9b d5 7d 67 11 b8 33 31 ab ff a1 f2 f9 95 6c 2a b0 e9 d4 5d 2c f6 62 d5 83 13 3b c9 ef 60 1f 1e b8 59 e3 0f e5 a4 e0 33 0e e3 35 1e 75 47 41 69 d9 10 4e 50 9a 36 3c f8 77 d5 28 16 9d 60 af bc ff 79 ef c7 64 1a 4e e0 78 00 fc 5e 75 9f a0 f4 1b de 5e 05 fa 87 3f 87 fb 4e 08 7f 8e f6 Data Ascii: }Ms#\@'FC)$`Qx7}'}?e#QU]Vo?w!=GP/8zq_5g}g31l*],b;`Y35uGAiNP6<w(`ydNx^u^?N
2024-10-25 09:23:18 UTC	733	IN	Data Raw: c0 f5 c3 79 67 55 de 72 6e 30 47 45 07 e2 e0 a1 a2 03 90 e8 a9 c6 72 0b fd 96 e1 b7 f4 fb 30 27 7d 00 6e 0b 06 59 a2 2f a7 1c 41 90 d7 5b 39 85 15 c9 af 0c df e0 d5 1a c3 7b 00 1d 0f 96 cc 31 14 f8 fd 00 92 38 f0 07 26 68 1f 8a 8f 02 83 09 f8 cc cc 8d 10 e1 e4 34 aa 0f 19 70 c2 8e cc 1c 39 82 4b ab 1f 9a f8 7d 5e 19 dd 82 51 6d 02 c8 68 0d cb 82 19 3d e0 68 3d 30 aa b2 07 f1 03 a3 85 32 be c1 a2 68 3c 24 e9 d6 00 eb 78 77 f8 c7 f3 e6 f9 e9 f9 49 d1 16 aa f8 dc e2 69 8e a0 fd 42 2a 87 f5 62 64 3c c1 2e c0 ac c9 aa 68 99 3c f0 39 1d 83 58 1d 4b 3a 00 96 ae dc 70 b4 e4 a7 ce 65 58 05 b4 fb 8e bc bf 10 3f 36 46 40 70 c5 0c 77 b9 d3 3a eb 0f b1 16 fb 6f 13 4b 51 87 90 96 0d 41 58 63 98 25 73 3f 2c 27 3c fd b0 42 76 1c 0c 01 29 d3 64 e9 c3 21 1c b1 69 b0 ed 3a Data Ascii: ygUrn0GEr0'}nY/A[9{18&h4p9K}^Qmh=h=02h<$xwIiB*bd<.h<9XK:peX?6F@pw:oKQAXc%s?,'<Bv)d!i:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49760	13.107.246.45	443	4228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:23:17 UTC	410	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_DQTmGfOEMmPUR-Vehc8U6Q2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 09:23:18 UTC	792	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:23:18 GMT Content-Type: application/x-javascript Content-Length: 122065 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 18 Sep 2024 23:43:27 GMT ETag: 0x8DCD83BB1CF3887 x-ms-request-id: 7ca9ca02-d01e-0078-184e-2660ae000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241025T092318Z-17c5cb586f6hhlf5mrwgq3erx800000001bg000000005szf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:23:18 UTC	15592	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 7b 57 e3 48 92 38 fa ff fd 14 46 33 97 b6 1b 61 2c bf b0 45 ab 59 63 a0 8a 69 c0 0c 86 ea 9e a5 18 8e 2c a5 8d 1a 59 f2 4a 32 8f 31 de cf fe 8b 88 cc 94 52 b6 4c 55 cd ee b9 f7 dc 73 e7 41 59 99 91 af c8 c8 c8 88 c8 c8 c8 bd 9f b7 fe af d2 cf a5 dd ef ff 4f 69 78 d3 bb be 29 0d 4e 4b 37 9f cf ae 8f 4b 57 f0 f5 8f d2 e5 e0 e6 ac 7f f2 fd f5 60 a3 f8 ff 9b 47 2f 2e 8d 3d 9f 95 e0 df 91 1d 33 b7 14 06 a5 30 2a 79 81 13 46 b3 30 b2 13 16 97 a6 f0 37 f2 6c bf 34 8e c2 69 29 79 64 a5 59 14 fe c9 9c 24 2e f9 5e 9c 40 a1 11 f3 c3 97 52 19 aa 8b dc d2 95 1d 25 6f a5 b3 ab 4a 15 ea 67 50 9b 37 f1 02 28 ed 84 b3 37 f8 fd 98 94 82 30 f1 1c 56 b2 03 97 6a f3 e1 23 88 59 69 1e b8 2c 2a bd 3c 7a ce 63 e9 c2 73 a2 30 0e c7 49 29 62 0e Data Ascii: {WH8F3a,EYci,YJ21RLUsAYOix)NK7KW`G/.=30yF07l4i)ydY$.^@R%oJgP7(70Vj#Yi,<zcs0I)b
2024-10-25 09:23:18 UTC	16384	IN	Data Raw: e9 a7 cc cf bf 13 ee c2 50 56 0b cd 18 7b 2a 73 e5 15 27 0c 2d 64 d3 19 de ce e0 ee 25 56 d1 9e 03 3c 05 00 07 d9 60 58 56 61 e5 1b 26 a7 83 cc be e1 49 4f dc 8f a6 4d 47 13 80 81 26 00 a1 f2 83 f4 2d 2e fc 66 33 16 af 94 43 fd 1d 3d 50 40 61 3a b6 a3 a7 ec 6a 3e fa 7e e6 bc e3 8e d0 67 8b fc 0d f1 c6 c1 6a ee ef e8 bb a5 e4 ae d5 67 d9 28 36 a1 3f 2b 5d d3 b8 c4 2b cd b0 87 54 5d 80 ca 52 12 5d a1 5b 58 e3 d1 06 17 3d 66 45 d5 22 57 c8 72 e5 a3 7e 0b bf 33 dc 46 3f 1a 80 70 44 43 b0 25 1a 95 bc aa 23 67 3a 86 45 87 01 e3 60 9b d6 6c 0a 22 81 e1 1c 77 3d 1c 00 f7 f1 0c 7d 4d 5f 3c 7b ec 05 6d 83 be b9 e0 2b e9 4b 9a 50 b4 ba bd 75 9e 89 7a 9e 08 7b 81 88 89 0b 6f 5e 70 d5 24 80 7c f4 b8 5e 66 17 2c 90 d1 e0 4c 27 e4 a3 88 96 43 a0 35 59 9f 99 94 1b ad 46 Data Ascii: PV{*s'-d%V<`XVa&IOMG&-.f3C=P@a:j>~gjg(6?+]+T]R][X=fE"Wr~3F?pDC%#g:E`l"w=}M_<{m+KPuz{o^p$\|^f,L'C5YF
2024-10-25 09:23:18 UTC	16384	IN	Data Raw: 38 39 d1 20 4e d0 1a bc 0b b9 32 bc f9 3d b1 71 12 23 a6 f9 8d 48 2b 02 99 f7 c9 fb c0 79 12 b1 ff 81 2b 67 3a fd ea 7d 38 de 3d 38 7c 43 e6 50 dc cf d5 19 56 80 8a 7a 2c f3 52 d5 bd 39 55 e5 89 4d b4 18 e9 a7 40 09 16 ad 51 d2 c3 74 7a 26 e6 46 41 dd 43 dc 4d 99 80 37 30 18 8b c9 88 a9 4f 44 26 9c 90 c3 b8 17 21 11 70 4b 28 8d b6 f0 23 a4 33 e4 79 a3 6e f6 11 61 29 9d b9 e0 0d 16 c3 66 e0 f7 01 f6 52 be b2 c1 35 a4 d6 5d d9 e0 ce 9c c6 55 9a f0 51 d2 59 cb 76 cf 2b 16 41 2b 4c 28 98 5a 94 79 55 cf d2 89 5e 8c 03 6e e8 73 9a 57 b1 b8 68 a5 0a d4 44 c6 ce 1b b3 ba da e6 e1 b6 31 cc 5d f4 1e ce 34 80 c8 83 ec 03 eb 9f 53 23 e5 95 9c 37 94 1d ad 5c 4d 35 6a eb 4e dc 85 ba 36 76 00 d3 67 3a 47 db 5d a6 2b 17 aa f7 cd 76 ea ef 6f ed e5 44 0e 59 e9 36 22 23 41 Data Ascii: 89 N2=q#H+y+g:}8=8\|CPVz,R9UM@Qtz&FACM70OD&!pK(#3yna)fR5]UQYv+A+L(ZyU^nsWhD1]4S#7\M5jN6vg:G]+voDY6"#A
2024-10-25 09:23:18 UTC	16384	IN	Data Raw: f7 2c 0c 48 89 2c cf 87 51 59 16 ed c9 8c 37 28 36 61 5b e3 44 fa 5e 46 3f 4b 8a 46 fe c1 7e c2 cd 84 47 e0 eb 38 ce b5 86 e2 6f b0 cd 33 b4 ad 10 5f 27 05 38 f4 7b 32 c6 50 53 f1 5d 5c d6 9d a3 21 b8 a9 3b 6e 5b c9 e4 ae 1b 8d 75 71 2f 8c cd 47 5c 9f 42 ca a2 67 ff 34 48 84 d4 0a 69 ea f7 e8 5a 02 9e 88 1a 6c 39 ed c0 cb 9f a4 79 3c 78 fc 7c 13 25 6c 06 98 9d e6 e9 08 ca a4 9d d0 8f 31 a2 4d d7 ae 51 6a c0 d8 23 ae 50 26 99 b9 64 74 06 d8 7a 8d 0a 57 93 3c e0 55 74 93 7e 94 55 7e 6c b0 44 02 95 db 10 a5 0a 7b e8 f8 3c 6b 00 11 da 20 e1 55 e3 47 f4 1b f4 a3 0b 78 42 2f 9c e0 53 9b 37 e2 ac 81 12 5c e5 f3 1f 11 2f b6 15 a7 56 c3 61 23 1d c0 f4 50 be 2a cc c9 3d 52 fc 79 df 25 7b d0 f7 c2 ea db 98 9a 5a e6 18 5d 71 54 99 c8 38 99 18 21 67 82 4a 35 e4 59 4f Data Ascii: ,H,QY7(6a[D^F?KF~G8o3_'8{2PS]\!;n[uq/G\Bg4HiZl9y<x\|%l1MQj#P&dtzW<Ut~U~lD{<k UGxB/S7\/Va#P*=Ry%{Z]qT8!gJ5YO
2024-10-25 09:23:18 UTC	16384	IN	Data Raw: 91 75 61 f9 66 51 6b 93 14 90 9f e9 f3 6c 54 c4 f9 0d e7 db e0 51 e8 3f d3 7e 68 f0 8b 47 26 24 3a e0 2b fa 20 19 ae 34 a7 8f a0 51 e3 9f f3 eb c8 a9 49 43 89 84 d0 d3 18 db 9a 61 69 b6 a3 b2 ea 0a 46 c8 fa 4b a7 23 4b 90 e6 40 1a a7 ce a6 66 cf 2b aa af 16 9e 81 12 34 0f 94 f0 b7 72 1b 02 51 90 d3 d0 c1 67 de 6e ef 92 c6 fd 27 51 14 8d 80 df 01 bb 1c 24 62 06 6e ce bc 93 06 c6 a1 79 08 33 09 1c a1 cd 52 48 89 15 66 90 a1 d8 43 38 8c 4a 94 61 56 d3 29 6e 32 62 39 51 75 09 93 31 45 b4 89 a7 cf f7 a5 cc 6a 26 8f 36 38 8f 8b 10 09 05 77 16 80 6e 03 6d 15 98 75 ea 11 af 2d e4 7b 0c 5d bf 1c 3a 48 bf c1 88 c7 d5 47 ba bd 02 24 4c 16 54 34 ed 88 93 4d db 84 b4 f3 54 14 84 21 3a 6c a8 51 9c fb 52 d2 11 4b 04 52 18 24 9e 93 d6 d4 00 85 db ed 81 9f f6 0b f4 49 22 Data Ascii: uafQklTQ?~hG&$:+ 4QICaiFK#K@f+4rQgn'Q$bny3RHfC8JaV)n2b9Qu1Ej&68wnmu-{]:HG$LT4MT!:lQRKR$I"
2024-10-25 09:23:18 UTC	16384	IN	Data Raw: 86 9c fc d4 49 c0 6e 02 df 17 79 12 c5 41 90 60 c2 b2 24 0a 93 24 c9 03 0e 2e b1 93 6e 6a 09 95 da 20 a1 dc 71 05 28 36 f7 12 db 4f dc c0 c3 70 82 44 e4 81 cd b2 db 79 9f d6 3a 4b 63 87 b3 c8 e5 81 ab fe f5 3d c6 41 54 49 9c fb 36 90 c2 71 6f e7 b0 5b ed 26 34 3c 22 8b c0 b5 f3 0c 5c 55 da a1 0d 4e 21 63 2f 10 21 b3 99 f0 79 bc 1b e2 0d d3 84 87 c2 06 17 b5 85 4c 32 70 54 b0 a1 1c ac 1d 8b 17 fa 91 08 76 d3 4d 64 70 cf 0d 44 e4 b1 cc 8d 5d 48 29 28 80 52 84 60 b5 79 c4 02 60 63 b0 9b 09 8c 52 6e 47 61 94 b9 99 eb db b9 4c ec 50 e4 1c 26 6c 00 6e 2e 92 c8 f1 77 83 0e b1 f1 7c 66 42 46 1c dc 2f 73 9c 50 46 49 c8 59 1e b8 0c d6 1c 0f 02 2f dc 0d 3d c5 29 f7 a4 e3 e7 59 1e 63 02 9d 0c eb 93 f0 c8 16 b1 2f 49 bc c7 d1 6e c6 54 2b 62 a9 e3 04 d2 b7 5d f0 f0 8c Data Ascii: InyA`$$.nj q(6OpDy:Kc=ATI6qo[&4<"\UN!c/!yL2pTvMdpD]H)(R`y`cRnGaLP&ln.w\|fBF/sPFIY/=)Yc/InT+b]
2024-10-25 09:23:18 UTC	16384	IN	Data Raw: 36 d9 e5 4f 3e 43 75 3a a5 ae da d0 ea 95 e1 cb cf bb f7 e8 a8 fc bd cf 9b 00 81 b6 4b b6 7e f9 63 33 41 cb 82 9b 55 92 ef 18 7f ab 95 71 25 c9 da 7b 09 4b 99 df 29 f2 9b a9 37 9f 37 63 8e aa 7f ce 1f 96 42 3e 2f 30 e9 f5 ae d8 56 e6 4b d3 dc ef a4 fc fc 8b 22 21 84 dc a7 eb cf be 2e fd e7 5f 6a 66 1e ad 72 e1 e5 eb 2f 2c 3b be ac 17 77 6b 8a be 15 25 fd f6 ba bd f6 ec 13 57 f8 4d 11 5c 4b 2f a5 da 7f 65 68 7d 2b b5 7e 56 b1 5c a6 b7 d1 ee eb aa b7 57 f2 b7 55 a2 6f a7 66 16 d5 4b 76 4e 12 77 ae 34 e4 9f aa a2 53 7d fd f3 2d 48 f0 eb 91 ce bb 94 8a 5f 95 bf e0 96 2e 3d 49 f1 63 cf e6 27 6c 56 fb 57 3a bc 43 8b 4c 72 ee 1d cd 6e e7 d5 ab 54 07 fb 65 ab 87 5d 71 89 3f ba 87 e7 96 1e 1c ba 5c 4d 9d 1d 98 9f ad 2f d8 15 cc fe fa 1a 0b f5 40 01 58 4d 17 5f 98 Data Ascii: 6O>Cu:K~c3AUq%{K)77cB>/0VK"!._jfr/,;wk%WM\K/eh}+~V\WUofKvNw4S}-H_.=Ic'lVW:CLrnTe]q?\M/@XM_
2024-10-25 09:23:18 UTC	8169	IN	Data Raw: 18 66 2f ae 5c 7c e2 cb 27 71 7c 3e a7 f8 64 2e 9e 3c 27 1e 75 61 3c f8 ec 4a 3c 3b 11 28 cc 31 d5 00 f5 a6 c3 86 c3 90 fc 69 02 ff 26 06 3c 78 03 84 40 93 83 34 8d bd 10 69 1f 40 02 8b c0 01 fe 9a 99 b9 02 6c 30 7c 23 22 21 89 68 59 8c 6c cf f1 0d 70 50 cd 3b 4e 15 97 02 08 78 98 cc 91 0c cf 0f f9 8c 4e a2 f9 f5 49 84 e5 df 80 36 02 83 71 b5 85 11 7a 27 91 44 2e a4 e7 47 8f 38 5c 11 ab 3e 52 79 4a 21 62 e0 1a 9f 94 56 4e 82 00 8f 24 05 e1 bc a4 24 89 d0 27 c0 b8 60 2b ff 3e 22 57 d9 85 cc 2c fe cc 98 b1 79 8a b0 e8 2f 0f e1 c9 21 87 d9 0b b4 7f 95 9a 7a 4d 3f 33 1f 78 c1 d8 92 5e fc 23 a7 49 9c 3a e7 62 c0 6c c5 42 e0 5c de 2f 8c 2f e2 e7 01 f1 c5 92 7c 96 ab 17 27 e7 71 96 9b 91 af d9 e8 de c1 9e 7a ec 1b 1f d9 0f 81 b3 be f1 86 fd 84 0a 9f 49 e2 03 b4 Data Ascii: f/\\|'q\|>d.<'ua<J<;(1i&<x@4i@l0\|#"!hYlpP;NxNI6qz'D.G8\>RyJ!bVN$$'`+>"W,y/!zM?3x^#I:blB\//\|'qzI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49763	13.107.246.45	443	4228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:23:18 UTC	404	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 09:23:19 UTC	738	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:23:18 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: 11d1cd68-801e-0052-503f-26c801000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241025T092318Z-16849878b78k8q5pxkgux3mbgg00000008vg00000000eqhn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:23:19 UTC	15646	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-10-25 09:23:19 UTC	1528	IN	Data Raw: 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49764	13.107.246.45	443	4228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:23:19 UTC	433	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 09:23:19 UTC	813	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:23:19 GMT Content-Type: application/x-javascript Content-Length: 116365 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:54 GMT ETag: 0x8DCBD5317046A2F x-ms-request-id: aae1884d-401e-000b-28c6-240790000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241025T092319Z-15b8d89586fqj7k5h9gbd8vs9800000001f0000000005b9m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 09:23:19 UTC	15571	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 6b 5b db 48 b6 28 fc 7d ff 0a 5b bb c7 2d b5 0b 63 19 30 44 46 78 48 42 7a 98 49 02 07 c8 f4 f4 10 4f 1e 61 97 b1 12 23 79 74 e1 d2 d8 fb b7 bf 6b ad aa 92 4a b2 0c 26 dd fb 9c 0f ef f4 d3 c1 ba 94 ea 5e eb 7e d9 fc a9 fe 5f b5 9f 6a 1b eb ff 57 3b bf 38 3c bb a8 9d bc ab 5d fc e5 f8 ec 6d ed 14 ee 7e ad 7d 3c b9 38 7e 73 b4 7e 3d d8 28 fe bb 98 f8 71 6d ec 4f 79 0d 7e af bc 98 8f 6a 61 50 0b a3 9a 1f 0c c3 68 16 46 5e c2 e3 da 0d fc 8d 7c 6f 5a 1b 47 e1 4d 2d 99 f0 da 2c 0a bf f2 61 12 d7 a6 7e 9c c0 47 57 7c 1a de d5 4c a8 2e 1a d5 4e bd 28 79 a8 1d 9f 5a 2d a8 9f 43 6d fe b5 1f c0 d7 c3 70 f6 00 d7 93 a4 16 84 89 3f e4 35 2f 18 51 6d 53 b8 09 62 5e 4b 83 11 8f 6a 77 13 7f 38 a9 7d f0 87 51 18 87 e3 a4 16 f1 21 f7 6f Data Ascii: k[H(}[-c0DFxHBzIOa#ytkJ&^~_jW;8<]m~}<8~s~=(qmOy~jaPhF^\|oZGM-,a~GW\|L.N(yZ-Cmp?5/QmSb^Kjw8}Q!o
2024-10-25 09:23:19 UTC	16384	IN	Data Raw: c6 f1 60 48 76 39 a2 ca 7d 0a c4 6c 46 7b 28 72 48 0c 1b 29 1f 49 83 69 74 84 3e 47 59 80 42 9b b2 59 ca d8 88 5e 36 a7 24 f7 af 17 38 0d 53 1c 3e 97 dc 17 24 8a 0d 4a a7 01 95 4d e2 5c ba e4 61 91 1d cc fc 76 23 bb 17 d9 47 55 e3 fb 1d 24 72 d5 75 be 53 62 b7 c3 d2 4d f8 e3 e1 9f 08 fe 94 d8 cb 4c b2 60 93 73 a2 08 7c dd c2 cc 73 9f 8e 83 c4 ee be 3e 32 f9 4f b1 b5 a0 9d 4a e3 1e bb 1b c2 d1 c8 77 a3 9e bf 9f 52 28 74 4a 36 90 30 df 82 5a d0 d6 7a 03 ab 1b c3 71 f0 37 c6 a2 a7 e2 09 4c c4 d8 f5 2d 06 8f 9b b6 66 12 5d 1b ff 14 d3 96 df 40 63 44 2c e6 6f b8 f8 2d c3 e6 72 5b e7 a8 e9 1d a4 c2 f9 71 c3 23 61 49 cf 47 27 27 7f 63 23 57 e2 4e 51 f5 3a 81 a7 93 7d af 37 d1 7a d7 44 92 9b fa 37 81 4e 4d 11 fd 88 ec b6 68 ac 96 e7 17 55 b3 97 4f d5 55 ce e4 46 Data Ascii: `Hv9}lF{(rH)Iit>GYBY^6$8S>$JM\av#GU$ruSbML`s\|s>2OJwR(tJ60Zzq7L-f]@cD,o-r[q#aIG''c#WNQ:}7zD7NMhUOUF
2024-10-25 09:23:19 UTC	16384	IN	Data Raw: d6 d6 bf a7 c9 82 82 ed 58 a9 a7 1e 3e d1 2c 29 8c 92 ca 92 96 69 33 da 9c 35 38 fc d6 d6 60 90 eb 41 a0 12 7b 42 d2 a3 7c 11 42 9b 34 a2 89 fa ac 50 54 6d 90 84 ac 5a 8e c0 f6 f8 15 ad ba d6 15 90 17 54 c3 6f b0 8f f9 f7 1b 9e 4f e9 71 33 74 f5 c0 fd e6 30 a7 21 7d a1 5d 47 f8 42 c3 4d be f3 4f 41 ba 44 02 66 76 07 a0 26 a7 28 74 99 e0 3b c9 b0 c7 62 54 65 49 f7 30 01 73 38 73 93 6f be 83 38 82 66 ee ce ce 1e 6e 0d f8 b1 f5 0c 45 5a dc 2d bb 1e b9 c6 a8 1c a5 3d e7 d3 a7 01 cc 63 fd e7 fc 53 3e 06 6a 35 fc f4 09 4b f4 c5 6e dd 03 86 b1 25 2e c8 49 20 ba c1 d7 11 55 f4 05 62 8b c7 b5 5e f7 e2 9e ef 6c 35 b7 f6 9a 6d 87 5d 61 90 56 d2 75 a6 25 9c a5 be 73 39 49 2f c2 89 c3 06 e9 f4 2e 8b 2f c7 85 ef 7c bc 0d 9f ad 6c b6 da db eb 9b ad cd ed 95 17 51 82 39 Data Ascii: X>,)i358`A{B\|B4PTmZToOq3t0!}]GBMOADfv&(t;bTeI0s8so8fnEZ-=cS>j5Kn%.I Ub^l5m]aVu%s9I/./\|lQ9
2024-10-25 09:23:19 UTC	16384	IN	Data Raw: a4 ca a6 93 a3 67 05 69 b4 c6 7e c4 d9 e3 39 43 68 1e b4 61 d1 c2 e6 08 96 6a d0 1c 75 d2 c3 bc a3 a2 68 ef 40 82 32 1c 1c 7b 39 fa ab 83 34 35 ee 0e dd d2 bd c6 a3 e3 da f3 7c fa 79 15 5c ca 3e 2f 40 6c be 3a bc e8 78 20 98 f4 2e e0 1d e4 fd 56 63 77 ca ae d9 1d 3a bf 64 68 0d bf 86 7f 8c a4 17 fe f8 eb 7d 5b d4 06 df ab e2 2b 59 bc 90 fa 71 8c 6d 52 7e a4 58 f9 fa 23 e9 ab 86 4c d4 b9 ba f0 c4 a4 6a a5 37 fb c1 26 5b c5 f2 30 9b 42 1c ab 21 ec 3a 8a cc 58 07 52 57 12 27 53 82 ac c7 c9 ad f0 1a cb f1 c6 54 45 5c 89 e4 5c bd 7e 67 7a 48 3c 46 dc 1b 4a 50 ba e3 2e 79 86 a5 3e ca 8a 99 87 ca 6b 17 98 cf 6e 0f 3e 00 68 d3 f7 f1 5f 4f 3b 19 98 1a 87 7b c1 08 f8 63 17 4f 7f ce 0c e0 45 fb 8b 27 9e ee 44 80 27 ce ab 3e 29 12 46 c4 b8 b4 78 ad c9 f6 06 5c b6 37 Data Ascii: gi~9Chajuh@2{945\|y\>/@l:x .Vcw:dh}[+YqmR~X#Lj7&[0B!:XRW'STE\\~gzH<FJP.y>kn>h_O;{cOE'D'>)Fx\7
2024-10-25 09:23:19 UTC	16384	IN	Data Raw: 41 1f ce 63 f8 7c 38 cb 6e 62 8c 3e 56 eb 18 50 d0 d5 39 aa fa b8 ea f0 0c 5e b3 3c ed 39 82 c4 c7 f0 e9 f8 a9 11 fd ee 03 1a 02 ec ec bc 1e bd 0c cf 82 8f 18 b1 2f f9 88 f8 f5 23 27 ed f9 c8 49 92 e1 1d 56 8c 6e 6f f1 cf 94 ff 2c 77 76 ec 2f 77 7a 98 3c 16 d9 f0 ed 93 db db 13 5b d5 13 9e a8 98 80 40 5f 4f 91 e3 3d 11 94 39 fa 19 ba 7f ca ac ef 0d d6 09 1c 92 46 38 e2 5f c7 49 80 9e 8b 38 eb 6c 85 09 b4 62 9d 5b 1d 47 92 f1 80 12 5a 18 ff 2c 54 bd 88 98 d9 ee e6 6f 4b a0 df 82 eb 90 1a 8e 00 5a 51 5c b0 c2 e5 84 de 2e 50 30 f1 df 6e 0c 8b a6 ae c5 6b 1f 27 c6 89 07 4e c3 78 68 cd f9 b4 db 43 45 68 31 f4 4e bb b0 17 d0 fc 82 4d ac e3 d0 7d d5 09 af 3d bd d4 fe 19 1c c3 e9 22 e3 50 a5 b2 47 17 b0 3f bc 0a d5 2e 75 7a b8 4f b2 1e 67 34 d9 4e 63 97 9f 7b d6 Data Ascii: Ac\|8nb>VP9^<9/#'IVno,wv/wz<[@_O=9F8_I8lb[GZ,ToKZQ\.P0nk'NxhCEh1NM}="PG?.uzOg4Nc{
2024-10-25 09:23:19 UTC	16384	IN	Data Raw: 6f 8f 8c 3d a0 b1 ba b9 56 ed db 8d 94 af 1a 74 72 fb 31 53 f0 93 bc 81 d3 83 bc d1 d3 83 6f 9c 02 6a e3 fb cf 03 ef f3 c6 93 51 af 57 f8 d0 5e 5b 41 b8 f6 c6 e1 d5 bf ff 20 b0 d5 6f 1c 43 7a 51 d7 1b c8 5f b4 24 71 d3 9b 0f a9 c9 b3 dd 0b f2 21 90 e4 43 24 09 25 4b 50 0d cf 8c 6f 62 e5 88 72 b3 63 51 46 52 e9 a5 cc 3b 9c 98 a6 0a 38 4d 85 3e df 95 f8 88 93 19 59 81 f6 42 13 0b 3c a8 2b 2c 2d 59 af b6 22 6e 07 b3 d5 11 28 e7 e0 30 d6 1d 1f c9 39 a8 6e 32 07 6f ac 59 1e 59 61 06 62 7c 2e 46 48 49 7c f6 91 70 d4 91 9b 81 f1 18 46 32 48 1c 20 d2 22 15 56 dd 08 24 98 bd d5 e8 1b 4f 8d 4c 62 15 e0 46 85 7d 25 72 e1 38 5e 7e 87 07 db e6 9f 6c e6 7d 32 ab ec c2 0d 57 35 d2 59 01 79 ee 6f 72 13 0d 85 da 8b c2 83 6c d0 0b 34 66 a5 dd 0c f0 9d ab f8 24 00 73 8c 07 Data Ascii: o=Vtr1SojQW^[A oCzQ_$q!C$%KPobrcQFR;8M>YB<+,-Y"n(09n2oYYab\|.FHI\|pF2H "V$OLbF}%r8^~l}2W5Yyorl4f$s
2024-10-25 09:23:20 UTC	16384	IN	Data Raw: 28 6a 74 56 53 66 c5 fe cf 72 5c d8 9f 15 29 63 4d 91 32 d6 52 36 60 5b ac 09 30 f3 65 fb ce f6 e7 38 a2 0d 16 84 de c9 87 1f 4f 4a f8 36 33 60 db bc f3 8d 03 e9 66 d1 90 42 cf a6 8c fd 73 20 33 13 e0 aa f5 a5 40 6e 98 1e 23 65 91 c8 1f 22 65 95 88 25 a6 ed 09 b2 32 48 8d e5 00 61 76 8c 6d 19 c2 5e e8 e8 5e 3a 68 05 64 8e e3 55 ad b0 7d a3 83 90 da 2a 86 89 ff 9d c7 b5 4c 3e b3 9f 90 23 3f b5 f8 ac 9f a3 69 ac a8 c9 d7 f0 d0 a1 31 ea b0 ea 38 1e fd 81 54 43 6a 1c c9 64 bf 17 8b 88 be 28 f5 24 4f 23 ba 05 68 c1 47 42 db e7 a1 13 f6 2b fb 9b 6e 7b fe 7a ee ac 7b ca 26 59 1f ca 92 10 03 1c 99 6d 00 76 75 8c 2b c5 8d 05 8e f2 dd 2e 95 2d ec ca 58 d9 6b fb 4e 66 a6 cd 1d 6c b8 21 f1 95 ff f2 7e 8c bb ce 0d 00 36 ef 3f bd f7 5f 1e 44 1d cd 79 b1 33 af ad 20 dc Data Ascii: (jtVSfr\)cM2R6`[0e8OJ63`fBs 3@n#e"e%2Havm^^:hdU}*L>#?i18TCjd($O#hGB+n{z{&Ymvu+.-XkNfl!~6?_Dy3
2024-10-25 09:23:20 UTC	2490	IN	Data Raw: 76 68 98 bc a0 3f 40 4a 03 1c b3 42 1d 27 14 de 2c 30 3f 34 26 15 78 3c 32 d3 c9 17 b6 63 68 f2 5e 3e ca 38 c7 fa da b4 a6 b7 c9 4e e7 6b eb eb 52 5a e4 a3 63 e0 52 22 d0 e9 eb e5 b4 39 64 8c cb 89 81 6f d5 ca 69 80 28 8f c7 e5 c4 31 24 e6 e5 c4 29 24 a6 e5 c4 89 0f 04 77 29 6d e6 03 81 5d 4a 1b f9 40 80 97 d2 6e 7c 20 c6 4b 69 97 3e 50 1b a5 b4 73 1f 48 9c 52 da 85 0f a4 51 29 ed cc b7 9e 94 d3 ae d0 e1 5d 29 ed da b7 be 2d a7 1d c9 68 79 e3 e3 b4 66 7d f1 b5 ed ac f7 28 1c df ed 02 dd 2b ec 9b 9f eb f4 dd eb 7d 2b 33 dc 1d af db 7d ff f8 89 03 39 df f8 eb ad c1 71 0a 93 ff b5 bd 0e 9f d7 dd 17 14 4f 10 e3 02 ae 47 0f d8 5e 7f 74 4f dd e7 ee a1 fb d6 fd d5 7d e5 be 73 0f 7e 87 46 f4 ed c2 7d 89 4a 7c 59 a6 83 dc bb ef fd 83 56 74 1e 03 cf f7 82 63 43 7f Data Ascii: vh?@JB',0?4&x<2ch^>8NkRZcR"9doi(1$)$w)m]J@n\| Ki>PsHRQ)])-hyf}(+}+3}9qOG^tO}s~F}J\|YVtcC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49765	13.107.246.45	443	4228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:23:19 UTC	662	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 09:23:19 UTC	806	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:23:19 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:46 GMT ETag: 0x8DB5C3F47E260FD x-ms-request-id: c9c40271-601e-006d-06aa-26771d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241025T092319Z-16849878b78hz7zj8u0h2zng140000000960000000001d4q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-25 09:23:19 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49767	13.107.246.45	443	4228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:23:19 UTC	663	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 09:23:19 UTC	779	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:23:19 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4911527F x-ms-request-id: 091d3d8e-001e-0078-235c-245f03000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241025T092319Z-15b8d89586fxdh48qknu9dqk2g000000047g000000006ues x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:23:19 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49766	13.107.246.45	443	4228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:23:19 UTC	624	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 09:23:19 UTC	812	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:23:19 GMT Content-Type: application/x-javascript Content-Length: 35168 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:55 GMT ETag: 0x8DCBD5317AEB807 x-ms-request-id: c991da44-b01e-0004-1704-2239ee000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241025T092319Z-16849878b786vsxz21496wc2qn0000000920000000009zxf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:23:19 UTC	15572	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 c4 bd 6b 43 db 48 b2 30 fc fd f9 15 e0 9d 65 ac b5 00 df 30 18 70 58 06 92 49 76 33 93 9c 5c 66 cf 2e 30 59 59 96 6d 0d b2 65 24 99 4b 02 cf 6f 7f eb d2 97 6a c9 90 cc 9c 67 df 33 e7 6c 70 57 df aa ab ab ab ab aa ab 5b db 7f 59 ff 3f 6b 7f 59 db fc f6 ff d6 de 7f 38 7e f7 61 ed cd 8b b5 0f 2f 5f bd 3b 5d 7b 0b a9 7f ae fd fc e6 c3 ab 93 e7 df de 0e 76 8a ff fb 30 8d f3 b5 71 9c 44 6b f0 77 18 e4 d1 68 2d 9d af a5 d9 5a 3c 0f d3 6c 91 66 41 11 e5 6b 33 f8 37 8b 83 64 6d 9c a5 b3 b5 62 1a ad 2d b2 f4 b7 28 2c f2 b5 24 ce 0b a8 34 8c 92 f4 66 ad 0e cd 65 a3 b5 b7 41 56 dc ad bd 7a eb 6d 41 fb 11 b4 16 4f e2 39 d4 0e d3 c5 1d fc 9e 16 6b f3 b4 88 c3 68 2d 98 8f a8 b5 04 12 f3 3c 5a 5b ce 47 51 b6 76 33 8d c3 e9 da 4f 71 98 a5 79 Data Ascii: kCH0e0pXIv3\f.0YYme$Kojg3lpW[Y?kY8~a/_;]{v0qDkwh-Z<lfAk37dmb-(,$4feAVzmAO9kh-<Z[GQv3Oqy
2024-10-25 09:23:19 UTC	16384	IN	Data Raw: 19 bb cd 17 f0 ef de f3 f6 f9 b2 b5 d7 7c 4e 0e b1 1f 36 e9 cf 0b fc b7 7d 4c 89 36 e5 f4 9a 94 e0 c7 fe 7a 3d 4e 40 b1 17 cf 5f e0 bf 2f 5e f4 37 e9 cf 0f 17 f7 e7 cb 53 30 14 ce e0 cf c9 0f a7 f8 ef c9 29 03 db 2f 08 78 8c 4d c1 9f 0e 43 3b 54 f4 74 b7 b3 49 7f 8e 09 fa 43 b7 49 65 9b 2d fc b7 cd 35 76 5f 5c 6c d3 a8 db 5f 23 2a cd c3 eb 78 7e f9 3a 18 46 09 d3 b1 83 c4 33 19 a7 51 5e c4 73 7a b4 81 b3 bb 4e f6 87 b8 48 22 ce d8 61 4a 77 7e bf 61 60 fd 83 c6 70 c7 3d 2a 24 65 3c ff 29 b8 05 65 8f 7e 92 28 a6 5f 03 b4 d0 e7 83 d6 01 a5 0e c3 03 62 c3 7e 07 64 3f 28 18 c0 de 59 28 e5 2a 95 c2 ad 0c bd 87 9b 9b 73 ef 0b 6e ef 4a 82 41 c5 98 db 07 16 9f 8d 40 26 e0 7b 08 5b f9 65 bc f8 90 5e 46 b8 dc fc 3e ee 76 a9 47 45 07 5c 78 b3 e5 cd 1b 0d e3 f9 ca 0c Data Ascii: \|N6}L6z=N@_/^7S0)/xMC;TtICIe-5v_\l_#x~:F3Q^szNH"aJw~a`p=$e<)e~(_b~d?(Y(*snJA@&{[e^F>vGE\x
2024-10-25 09:23:19 UTC	3212	IN	Data Raw: 38 5d 1d 96 55 52 b0 ee 65 51 a5 80 82 a6 5f a3 d8 a6 8c a4 8c 2d e9 61 bf de 76 31 e7 b5 b7 35 ec ae ac a0 fd 7a 5a e0 51 85 64 9c 71 86 da 05 75 05 e2 2f c1 e3 1b 2e e0 ac 2b f3 db b5 61 3f 28 3c f2 32 68 91 01 35 d9 bf 91 79 ee 76 ca 31 5d 87 e6 ce b3 68 e5 9d 9d 2e 03 be 71 96 2f 47 c1 de 90 b1 6d de b2 47 e1 bd a3 cd 0e 87 4e c4 50 4c ad 76 42 79 13 eb d1 84 ba 89 a8 ec 51 f8 46 ef 45 5e 59 6d ae 8d 02 82 52 f5 51 9c a3 01 35 fe 52 6d 5e eb b5 46 a5 5a 61 3a 08 21 bc 5e 6d 35 58 78 bd 56 2c 36 30 9c 5e 86 cf 75 f6 7b 81 77 02 f8 55 8d 84 b0 cc 45 ca d8 44 7f 89 74 f2 8a 88 52 95 62 2a a5 20 69 a9 dc a0 a0 52 ad a5 a2 81 21 b3 5b 2a a1 61 96 92 ca fe c5 54 63 90 d5 37 2a 4e bc 5d 53 05 b2 91 97 6a d4 5c e7 b2 d7 69 fe 72 6e 06 bd 93 76 bf 82 ed 7e 78 Data Ascii: 8]UReQ_-av15zZQdqu/.+a?(<2h5yv1]h.q/GmGNPLvByQFE^YmRQ5Rm^FZa:!^m5XxV,60^u{wUEDtRb* iR![aTc7N]Sj\irnv~x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49770	13.107.246.45	443	4228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:23:19 UTC	663	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 09:23:19 UTC	799	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:23:19 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F49ED96E0 x-ms-request-id: 57041448-801e-0007-34a0-26af35000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241025T092319Z-16849878b78fmrkt2ukpvh9wh40000000910000000002s5h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 09:23:19 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49772	13.107.246.45	443	4228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:23:20 UTC	417	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 09:23:20 UTC	778	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:23:20 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:46 GMT ETag: 0x8DB5C3F47E260FD x-ms-request-id: 74b63407-d01e-0057-02ee-256d65000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241025T092320Z-15b8d89586fvk4kmbg8pf84y88000000018g000000003z9c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:23:20 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49773	13.107.246.45	443	4228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:23:20 UTC	418	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 09:23:20 UTC	800	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:23:20 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4911527F x-ms-request-id: f7e7a450-101e-0074-1f94-25c80b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241025T092320Z-16849878b78fmrkt2ukpvh9wh40000000900000000005dux x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:23:20 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49775	13.107.246.45	443	4228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:23:20 UTC	439	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 09:23:20 UTC	797	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:23:20 GMT Content-Type: application/x-javascript Content-Length: 35168 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:55 GMT ETag: 0x8DCBD5317AEB807 x-ms-request-id: 4f4190ff-b01e-001c-1234-269136000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241025T092320Z-r197bdfb6b4hdk8h12qtxfwscn00000000x00000000084kp x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:23:20 UTC	15587	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 c4 bd 6b 43 db 48 b2 30 fc fd f9 15 e0 9d 65 ac b5 00 df 30 18 70 58 06 92 49 76 33 93 9c 5c 66 cf 2e 30 59 59 96 6d 0d b2 65 24 99 4b 02 cf 6f 7f eb d2 97 6a c9 90 cc 9c 67 df 33 e7 6c 70 57 df aa ab ab ab ab aa ab 5b db 7f 59 ff 3f 6b 7f 59 db fc f6 ff d6 de 7f 38 7e f7 61 ed cd 8b b5 0f 2f 5f bd 3b 5d 7b 0b a9 7f ae fd fc e6 c3 ab 93 e7 df de 0e 76 8a ff fb 30 8d f3 b5 71 9c 44 6b f0 77 18 e4 d1 68 2d 9d af a5 d9 5a 3c 0f d3 6c 91 66 41 11 e5 6b 33 f8 37 8b 83 64 6d 9c a5 b3 b5 62 1a ad 2d b2 f4 b7 28 2c f2 b5 24 ce 0b a8 34 8c 92 f4 66 ad 0e cd 65 a3 b5 b7 41 56 dc ad bd 7a eb 6d 41 fb 11 b4 16 4f e2 39 d4 0e d3 c5 1d fc 9e 16 6b f3 b4 88 c3 68 2d 98 8f a8 b5 04 12 f3 3c 5a 5b ce 47 51 b6 76 33 8d c3 e9 da 4f 71 98 a5 79 Data Ascii: kCH0e0pXIv3\f.0YYme$Kojg3lpW[Y?kY8~a/_;]{v0qDkwh-Z<lfAk37dmb-(,$4feAVzmAO9kh-<Z[GQv3Oqy
2024-10-25 09:23:20 UTC	16384	IN	Data Raw: 0e b1 1f 36 e9 cf 0b fc b7 7d 4c 89 36 e5 f4 9a 94 e0 c7 fe 7a 3d 4e 40 b1 17 cf 5f e0 bf 2f 5e f4 37 e9 cf 0f 17 f7 e7 cb 53 30 14 ce e0 cf c9 0f a7 f8 ef c9 29 03 db 2f 08 78 8c 4d c1 9f 0e 43 3b 54 f4 74 b7 b3 49 7f 8e 09 fa 43 b7 49 65 9b 2d fc b7 cd 35 76 5f 5c 6c d3 a8 db 5f 23 2a cd c3 eb 78 7e f9 3a 18 46 09 d3 b1 83 c4 33 19 a7 51 5e c4 73 7a b4 81 b3 bb 4e f6 87 b8 48 22 ce d8 61 4a 77 7e bf 61 60 fd 83 c6 70 c7 3d 2a 24 65 3c ff 29 b8 05 65 8f 7e 92 28 a6 5f 03 b4 d0 e7 83 d6 01 a5 0e c3 03 62 c3 7e 07 64 3f 28 18 c0 de 59 28 e5 2a 95 c2 ad 0c bd 87 9b 9b 73 ef 0b 6e ef 4a 82 41 c5 98 db 07 16 9f 8d 40 26 e0 7b 08 5b f9 65 bc f8 90 5e 46 b8 dc fc 3e ee 76 a9 47 45 07 5c 78 b3 e5 cd 1b 0d e3 f9 ca 0c cb 13 7e 4b 7f b3 f5 a0 bd 18 b0 9c 02 ae 84 Data Ascii: 6}L6z=N@_/^7S0)/xMC;TtICIe-5v_\l_#x~:F3Q^szNH"aJw~a`p=$e<)e~(_b~d?(Y(*snJA@&{[e^F>vGE\x~K
2024-10-25 09:23:20 UTC	3197	IN	Data Raw: a3 d8 a6 8c a4 8c 2d e9 61 bf de 76 31 e7 b5 b7 35 ec ae ac a0 fd 7a 5a e0 51 85 64 9c 71 86 da 05 75 05 e2 2f c1 e3 1b 2e e0 ac 2b f3 db b5 61 3f 28 3c f2 32 68 91 01 35 d9 bf 91 79 ee 76 ca 31 5d 87 e6 ce b3 68 e5 9d 9d 2e 03 be 71 96 2f 47 c1 de 90 b1 6d de b2 47 e1 bd a3 cd 0e 87 4e c4 50 4c ad 76 42 79 13 eb d1 84 ba 89 a8 ec 51 f8 46 ef 45 5e 59 6d ae 8d 02 82 52 f5 51 9c a3 01 35 fe 52 6d 5e eb b5 46 a5 5a 61 3a 08 21 bc 5e 6d 35 58 78 bd 56 2c 36 30 9c 5e 86 cf 75 f6 7b 81 77 02 f8 55 8d 84 b0 cc 45 ca d8 44 7f 89 74 f2 8a 88 52 95 62 2a a5 20 69 a9 dc a0 a0 52 ad a5 a2 81 21 b3 5b 2a a1 61 96 92 ca fe c5 54 63 90 d5 37 2a 4e bc 5d 53 05 b2 91 97 6a d4 5c e7 b2 d7 69 fe 72 6e 06 bd 93 76 bf 82 ed 7e 78 23 de 14 2a 36 0a d3 69 66 72 2e 59 04 99 e6 Data Ascii: -av15zZQdqu/.+a?(<2h5yv1]h.q/GmGNPLvByQFE^YmRQ5Rm^FZa:!^m5XxV,60^u{wUEDtRb* iR![aTc7N]Sj\irnv~x#*6ifr.Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49774	13.107.246.45	443	4228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:23:20 UTC	418	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 09:23:20 UTC	778	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:23:20 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F49ED96E0 x-ms-request-id: 050b71b1-f01e-000e-7754-26d54b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241025T092320Z-17c5cb586f6g6g2sbe6edp75y400000002dg000000000d0b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:23:20 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:23:58 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:23:58 UTC	540	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:23:58 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 23 Oct 2024 06:30:03 GMT ETag: "0x8DCF32C20D7262E" x-ms-request-id: 39f98116-901e-0015-0fb5-25b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092358Z-16849878b786fl7gm2qg4r5y7000000000kg0000000066er x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:23:58 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-25 09:23:58 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-25 09:23:58 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-25 09:23:58 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-25 09:23:58 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-25 09:23:58 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-25 09:23:58 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-25 09:23:58 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-25 09:23:58 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-25 09:23:58 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:23:59 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:23:59 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:23:59 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: fc6998d3-101e-008d-52ad-2692e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092359Z-16849878b78625wls3r8psr7u000000000ng000000005pc5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 09:23:59 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:23:59 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:23:59 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:23:59 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 1a9c8bfd-301e-0000-1fee-25eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092359Z-16849878b786lft2mu9uftf3y400000001m0000000006hfe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:23:59 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:23:59 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:23:59 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:23:59 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 331d1c77-401e-0029-354e-229b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092359Z-16849878b785dznd7xpawq9gcn00000001n000000000dhdp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 09:23:59 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:23:59 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:23:59 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:23:59 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 5e9af5f8-e01e-0099-17f4-24da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092359Z-15b8d89586fhl2qtatrz3vfkf0000000068g000000005cpe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:23:59 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:23:59 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:23:59 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:23:59 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092359Z-16849878b787wpl5wqkt5731b40000000130000000006pw9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:23:59 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:00 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:00 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:00 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: e5972945-801e-007b-45f3-24e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092400Z-15b8d89586fnsf5zd126eyaetw00000001mg000000000veh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 09:24:00 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:00 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:00 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:00 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 734838af-101e-0065-4be5-214088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092400Z-16849878b78x6gn56mgecg60qc000000023g0000000090ah x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:00 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:00 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:00 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:00 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: fef44d2e-901e-007b-639e-26ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092400Z-16849878b78c5zx4gw8tcga1b400000008vg000000009rab x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:00 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:00 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:00 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:00 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 88497579-201e-0000-113a-26a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092400Z-17c5cb586f67p8ffw0hbk5rahw00000002e0000000007dp4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:00 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:00 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:00 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:00 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e1deb6d3-201e-006e-700b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092400Z-16849878b78s2lqfdex4tmpp78000000091g000000006bkx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:00 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:01 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:01 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: a568b4a7-501e-0035-1a18-26c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092401Z-r197bdfb6b49q4951yb663v3ds00000001eg000000001403 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:01 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:01 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:01 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 82d491bf-801e-0048-1e3d-26f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092401Z-17c5cb586f6w4mfs5xcmnrny6n00000001vg0000000037qm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:01 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:01 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:01 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:01 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1b2fb3ba-201e-0033-65ce-20b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092401Z-16849878b787sbpl0sv29sm89s000000090g00000000e6sd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:01 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:01 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:01 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: d7788b78-601e-0084-2f37-266b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092401Z-15b8d89586f4zwgbgswvrvz4vs00000001k00000000043y0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:01 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:01 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:01 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 7de7ed35-901e-005b-7c14-222005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092401Z-16849878b78lhh9t0fb3392enw00000008x0000000006ezb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:01 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:02 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:02 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:02 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 2fd6bd5d-d01e-007a-394f-26f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092402Z-16849878b78c5zx4gw8tcga1b400000008xg000000005pdf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:02 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:02 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:02 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:02 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: f94f539d-b01e-001e-773a-260214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092402Z-15b8d89586f5s5nz3ffrgxn5ac00000000v0000000009rbc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 09:24:02 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:02 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:02 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:02 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 4cd68789-d01e-0017-448e-21b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092402Z-16849878b78rjhv97f3nhawr7s00000008yg000000007pwa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:02 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:02 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:02 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:02 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: ec40f21c-901e-0067-494d-22b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092402Z-16849878b787wpl5wqkt5731b4000000011g000000009u49 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:02 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:02 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:02 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:02 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: f981d888-e01e-0099-4d18-26da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092402Z-17c5cb586f6g6g2sbe6edp75y4000000026g00000000941e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:02 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:03 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:03 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:03 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: b26f0bb8-d01e-00ad-3518-26e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092403Z-15b8d89586fhl2qtatrz3vfkf000000006cg0000000011qs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:03 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:03 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:03 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:03 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 630b92e5-101e-00a2-203d-269f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092403Z-17c5cb586f6zrq5bnguxgu7frc0000000110000000007mss x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:03 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:03 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:03 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:03 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: bbff353d-b01e-005c-270e-264c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092403Z-16849878b78dsttbr1qw36rxs800000008yg00000000ct32 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 09:24:03 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:03 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:03 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:03 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 00f7314e-e01e-0052-48ac-21d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092403Z-16849878b78jfqwd1dsrhqg3aw000000096g000000000acu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:03 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:03 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:03 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:03 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 6b700fd2-301e-005d-5b5a-26e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092403Z-17c5cb586f62blg5ss55p9d6fn00000000s0000000009h5z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:03 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:04 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:04 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:04 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 66384a0c-801e-002a-112b-2631dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092404Z-15b8d89586fmhkw429ba5n22m800000001sg0000000026a4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:04 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:04 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:04 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:04 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: ff743265-301e-000c-1ff2-24323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092404Z-r197bdfb6b4g24ztpxkw4umce800000001t0000000009y18 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:04 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:04 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:04 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:04 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 1290ce53-d01e-002b-7905-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092404Z-16849878b78nx5sne3fztmu6xc00000001b0000000003xct x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:04 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:04 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:04 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:04 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 2760be74-301e-0096-200b-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092404Z-15b8d89586fx2hlt035xdehq580000000g1g000000001szc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:04 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:04 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:04 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:04 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 131e52ce-d01e-002b-553b-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092404Z-16849878b787wpl5wqkt5731b4000000011000000000bn83 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:04 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:04 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:05 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:05 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: c4337264-b01e-0070-640b-221cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092405Z-16849878b78hh85qc40uyr8sc800000000p0000000004452 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:05 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:05 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:05 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:05 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 1f9c3bb8-d01e-0014-220b-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092405Z-16849878b787wpl5wqkt5731b4000000010000000000dp5u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:05 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:05 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:05 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:05 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 46af3d48-701e-0032-6627-21a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092405Z-16849878b78k8q5pxkgux3mbgg00000008yg000000007hff x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:05 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:05 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:05 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:05 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 27632888-301e-0096-61d8-21e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092405Z-16849878b78k8q5pxkgux3mbgg000000092g00000000036p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:05 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:05 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:05 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:05 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: c1e5dbf7-401e-0029-2d43-269b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092405Z-17c5cb586f6mhqqb91r8trf2c80000000150000000005kku x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:05 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:05 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:06 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:05 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 3f3879b0-501e-0035-0b40-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092405Z-16849878b78x6gn56mgecg60qc000000022g00000000butc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:06 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:05 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:06 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:06 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 43d69f68-001e-00ad-61b4-24554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092406Z-15b8d89586flzzks5bs37v2b9000000004ng000000002q67 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:06 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:05 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:06 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:06 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 2044f02f-601e-0001-42eb-25faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092406Z-16849878b785jrf8dn0d2rczaw00000001e000000000a12x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:06 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:06 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:06 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:06 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 13d0f17b-b01e-0053-80f4-24cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092406Z-15b8d89586flzzks5bs37v2b9000000004n0000000003e4p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:06 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:06 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:06 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:06 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 395fbb66-201e-003f-4179-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092406Z-16849878b78hz7zj8u0h2zng1400000008zg00000000eunu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:06 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:07 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:07 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 51ccb76b-001e-0049-0a37-265bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092407Z-15b8d89586f989rkfw99rwd68g00000001n0000000002w2s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:07 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:07 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:07 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: f826faa8-301e-0099-1457-266683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092407Z-17c5cb586f6w4mfs5xcmnrny6n00000001qg00000000ammt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:07 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:07 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:07 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:07 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 33c93406-d01e-0066-3d3d-26ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092407Z-15b8d89586fsx9lfqmgrbzpgmg0000000fz00000000066k2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 09:24:07 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:07 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:07 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 95c67357-201e-0051-60f5-247340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092407Z-15b8d89586f5s5nz3ffrgxn5ac00000000y0000000006ggc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:07 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:07 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:07 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 24b9edea-d01e-002b-4c3d-2625fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092407Z-17c5cb586f6tq56f8fz96wddtg00000002eg0000000061ss x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:07 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:07 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:08 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 352988b4-001e-0065-3a25-260b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092408Z-17c5cb586f6qkkscezt8hb00a000000002kg0000000005zp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:08 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:07 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:08 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:08 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 34cbbb6f-001e-0046-0fdf-25da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092408Z-16849878b78wv88bk51myq5vxc00000000q0000000002a9t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 09:24:08 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:07 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:08 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 4a7bd2a8-301e-0096-209e-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092408Z-16849878b78q4pnrt955f8nkx800000008tg00000000f1p1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:08 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:08 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:08 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 97925bc6-b01e-0002-7e3b-261b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092408Z-r197bdfb6b4lbgfqwkqbrm672s00000002pg00000000chgc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:08 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:08 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:08 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 33ade019-101e-0028-30f5-248f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092408Z-15b8d89586f8l5961kfst8fpb00000000at0000000002sgf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:08 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:08 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:08 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:08 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: c3c7965e-601e-0050-4428-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092408Z-r197bdfb6b4bq7nf8mnywhn9e0000000019g000000009duu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 09:24:08 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:08 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:08 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 989513d0-f01e-0096-5813-2610ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092408Z-17c5cb586f6qkkscezt8hb00a000000002bg0000000094bw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:08 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:08 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:08 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 8e6df999-101e-007a-77ef-24047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092408Z-15b8d89586f2hk28h0h6zye26c00000002sg0000000058dq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:09 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:09 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:09 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 100b0a78-f01e-0003-754e-224453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092409Z-16849878b785g992cz2s9gk35c0000000900000000009hvm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:09 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:09 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:09 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 1c275e9e-901e-0048-342c-26b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092409Z-r197bdfb6b429k2s6br3k49qn400000006g00000000036rd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:09 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:09 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:09 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: e574f622-301e-0052-4beb-2565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092409Z-16849878b78q4pnrt955f8nkx800000008yg000000003y47 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:09 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:09 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:09 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:09 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 53fe968a-201e-0096-055e-26ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092409Z-16849878b78rjhv97f3nhawr7s000000092g000000000564 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 09:24:09 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:09 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:09 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: c1ca1df0-401e-0029-1e3a-269b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092409Z-17c5cb586f6g6g2sbe6edp75y40000000290000000006r6f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:09 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:10 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:10 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 16b9c19d-f01e-0052-0d9e-269224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092410Z-16849878b785f8wh85a0w3ennn000000091g00000000231z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:10 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:10 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:10 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: d4a93cd8-001e-008d-65f5-24d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092410Z-15b8d89586fmhkw429ba5n22m800000001r0000000003r7b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:10 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:10 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:10 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:10 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2ac474a9-a01e-0098-14a3-268556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092410Z-16849878b78z5q7jpbgf6e9mcw000000095g0000000038x0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:10 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:10 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:10 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: ffa56774-c01e-007a-6c38-26b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092410Z-16849878b78k46f8kzwxznephs00000008ug00000000chtt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:10 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:10 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:10 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:10 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 3c45f43b-a01e-00ab-363f-269106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092410Z-17c5cb586f6gkqkwd0x1ge8t0400000000fg000000005g32 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:10 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:11 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:11 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:11 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: d9732123-901e-007b-1098-25ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092411Z-16849878b78k8q5pxkgux3mbgg000000092g0000000003a5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:11 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:11 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:11 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:11 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: b12d28ce-501e-000a-62f4-240180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092411Z-15b8d89586fhl2qtatrz3vfkf000000006c0000000001hf7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:11 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:11 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:11 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:11 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 933aac65-d01e-007a-51aa-26f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092411Z-16849878b785g992cz2s9gk35c000000092g00000000445q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 09:24:11 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:11 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:11 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:11 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 63249b2a-c01e-0046-2e2c-262db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092411Z-r197bdfb6b4tq6ldv3s2dcykm800000002zg0000000029v9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:11 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:11 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:11 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:11 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: cf3643bb-401e-0078-69a3-264d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092411Z-16849878b78z5q7jpbgf6e9mcw000000095g0000000038xw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:11 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:11 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:12 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:11 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 28e3a13f-d01e-0049-4f16-25e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092411Z-r197bdfb6b4hsj5bywyqk9r2xw00000001k000000000c1sk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:12 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:11 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:12 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:11 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: a2e914b6-401e-0029-5fce-219b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092411Z-16849878b787sbpl0sv29sm89s00000008z000000000gu97 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:12 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:12 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:12 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:12 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: c52d6895-f01e-001f-0bd3-205dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092412Z-16849878b78qf2gleqhwczd21s00000000e0000000002v3t x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:12 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:12 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:12 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:12 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: f6a2cc2d-401e-0015-3796-250e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092412Z-16849878b787wpl5wqkt5731b40000000150000000002gxu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:12 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:12 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:12 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:12 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: c561987e-801e-0015-0d0b-22f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092412Z-16849878b78hh85qc40uyr8sc800000000q0000000002udd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:12 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:12 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:12 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:12 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 2f548e5b-201e-003c-5d24-2130f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092412Z-16849878b78wv88bk51myq5vxc00000000r0000000000fct x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:12 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:12 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:12 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:12 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 2034bdf9-701e-003e-3056-2679b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092412Z-16849878b786lft2mu9uftf3y400000001n0000000004e1x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:12 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:13 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:13 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:13 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 28e57d84-e01e-003c-4a46-26c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092413Z-r197bdfb6b4hsj5bywyqk9r2xw00000001k000000000c1u0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:13 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:13 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:13 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:13 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: bb28544f-801e-0047-7562-267265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092413Z-16849878b78lhh9t0fb3392enw00000008sg00000000h68r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:13 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:13 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:13 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:13 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 218b1b25-701e-005c-4b21-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092413Z-r197bdfb6b47gqdjqh2kwsuz8c00000000ng00000000c4gb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:13 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:13 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:13 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:13 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 0eea03f1-d01e-0066-098a-21ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092413Z-16849878b785jrf8dn0d2rczaw00000001g0000000007p6z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:13 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:13 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:13 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:13 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: cd066ebd-401e-0035-394c-2682d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092413Z-r197bdfb6b4c8q4qvwwy2byzsw00000000fg0000000020kw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:13 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:14 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:14 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:14 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 9c2fdade-c01e-002b-16f2-246e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092414Z-15b8d89586fqj7k5h9gbd8vs9800000001e0000000006hvu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:14 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:14 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:14 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:14 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: d0d0f8e5-601e-000d-298c-212618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092414Z-16849878b787psctgubawhx7k800000008rg00000000ds6s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:14 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:14 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:14 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:14 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c2e82b32-d01e-005a-2b27-267fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092414Z-17c5cb586f68ph8xe1hpx7aynw00000002ng000000000b0h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:14 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:14 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:14 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:14 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 0243abe0-001e-0028-29fb-25c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092414Z-16849878b78x6gn56mgecg60qc0000000250000000006dgd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:14 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:14 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:14 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:14 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 55d9b643-201e-003f-330b-226d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092414Z-16849878b7898p5f6vryaqvp580000000150000000007v7h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:14 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:15 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:15 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:15 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cd04a713-f01e-003f-7315-26d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092415Z-16849878b78nx5sne3fztmu6xc000000015g00000000fhzx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:15 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:15 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:15 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:15 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: c4fdf5e3-f01e-0003-490d-264453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092415Z-15b8d89586f5s5nz3ffrgxn5ac00000000w0000000008fgb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:15 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:15 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:15 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:15 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: dd040750-801e-0083-62fe-25f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092415Z-r197bdfb6b4g24ztpxkw4umce800000001wg000000003w5y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:15 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:15 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:15 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:15 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 14889e7f-701e-0053-13f2-253a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092415Z-16849878b78p8hrf1se7fucxk8000000019g0000000014zu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:15 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:15 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:15 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:15 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 2edde2c3-c01e-002b-176a-266e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092415Z-16849878b78c5zx4gw8tcga1b400000008zg000000001fae x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 09:24:15 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:16 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:16 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:16 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 4faef820-a01e-0053-6a4e-228603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092416Z-16849878b78nx5sne3fztmu6xc000000017000000000cen2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:16 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:16 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:16 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:16 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: d5dedb48-201e-003c-4815-2630f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092416Z-17c5cb586f6z6tw6g7cmdv30m800000001cg000000007z20 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:16 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:16 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:16 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:16 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 333c19fd-801e-00ac-16e3-21fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092416Z-16849878b78k8q5pxkgux3mbgg000000090g000000003rgw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:16 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:16 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:16 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:16 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 94ed8cc5-801e-0083-11f2-24f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092416Z-15b8d89586fqj7k5h9gbd8vs9800000001m0000000000d7z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:16 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:16 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:16 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:16 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 2dc052aa-901e-0067-6a61-26b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092416Z-17c5cb586f6tzc2wdxudxz0zw800000001w000000000a6xh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:16 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:17 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:17 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:17 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: e0b43d58-801e-00ac-6858-26fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092417Z-17c5cb586f6qs7hge7b080kmr0000000025g00000000aq9q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 09:24:17 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:17 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:17 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:17 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: f0c9e92d-201e-0000-1199-25a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092417Z-16849878b785g992cz2s9gk35c00000008x000000000gnbm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:17 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:17 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:17 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:17 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: cbb0b495-901e-005b-56e4-212005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092417Z-16849878b787wpl5wqkt5731b4000000011g000000009ueg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:17 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:17 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:17 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:17 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 16f71f95-f01e-0099-73fb-259171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092417Z-16849878b786vsxz21496wc2qn000000092000000000a21n x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:17 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:17 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:17 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:17 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 3bd815fc-c01e-0066-6070-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092417Z-16849878b785g992cz2s9gk35c00000008yg00000000chte x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 09:24:17 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:18 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:18 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:18 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 0c5aa6f6-c01e-000b-5d92-25e255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092418Z-16849878b78q4pnrt955f8nkx800000008t000000000gk4m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:18 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:18 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:18 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:18 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 9a0db76d-d01e-0017-4396-25b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092418Z-16849878b78qf2gleqhwczd21s00000000gg000000002p3s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:18 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:18 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:18 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:18 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 219fbbc4-201e-0071-49b1-26ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092418Z-16849878b78x6gn56mgecg60qc000000027g000000001699 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:18 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:18 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:18 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:18 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: ff6a02c5-601e-003e-572b-263248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092418Z-r197bdfb6b42rt68rzg9338g1g00000001k00000000010hf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:18 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:18 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:18 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:18 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 2f6e7a45-901e-0083-466a-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092418Z-16849878b785g992cz2s9gk35c00000009300000000037ud x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 09:24:18 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:18 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:19 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:19 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: b2ef1849-d01e-00ad-023d-26e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092419Z-17c5cb586f6f69jxsre6kx2wmc00000002sg000000001b0e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:19 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:18 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:19 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:19 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: ada46982-001e-0014-673d-265151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092419Z-15b8d89586ff5l62aha9080wv000000001m0000000004mrz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:19 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:19 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:19 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:19 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: e8b9c1e5-a01e-001e-79f2-2449ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092419Z-15b8d89586flspj6y6m5fk442w0000000620000000006py7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:19 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:19 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:19 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:19 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: e3c3ecc6-001e-0014-1bf2-245151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092419Z-r197bdfb6b4lbgfqwkqbrm672s00000002qg00000000ad1t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:19 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:19 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:19 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:19 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: de8fa6d8-101e-00a2-6a1c-269f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092419Z-16849878b785dznd7xpawq9gcn00000001mg00000000ev2k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:19 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:19 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:19 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:19 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: f1436c55-a01e-001e-41ef-2549ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092419Z-16849878b787psctgubawhx7k800000008u0000000009007 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:19 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:19 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:19 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:19 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: f5f98d55-001e-0049-58e4-215bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092419Z-16849878b78x6gn56mgecg60qc000000021g00000000e4dz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:19 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:19 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:20 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:19 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: e014a2e3-501e-0035-060b-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092419Z-16849878b78rjhv97f3nhawr7s00000009100000000036m6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:20 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49897	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:19 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:20 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:20 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: baa41b4f-401e-00ac-2c28-210a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092420Z-16849878b78rjhv97f3nhawr7s000000091g000000002ff7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:20 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49898	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:20 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:20 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:20 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 28718399-201e-0003-7628-26f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092420Z-17c5cb586f6tzc2wdxudxz0zw800000001w000000000a6zp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:20 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49900	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:20 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:20 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:20 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 9a8cc640-601e-0032-1ef5-24eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092420Z-15b8d89586fx2hlt035xdehq580000000g1000000000349m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:20 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49899	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:20 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:20 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:20 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 60449bdf-301e-005d-500b-26e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092420Z-16849878b78z5q7jpbgf6e9mcw00000009400000000060zh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 09:24:20 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49901	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:20 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:20 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:20 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: ccbf99dc-401e-0035-1c33-2682d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092420Z-17c5cb586f6qs7hge7b080kmr000000002c0000000001ucz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:20 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49902	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:20 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:20 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: af8bbd6e-001e-00a2-3df5-24d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092420Z-15b8d89586fmhkw429ba5n22m800000001m0000000008pda x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:21 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49903	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:20 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:20 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 44e5e715-301e-001f-6416-24aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092420Z-15b8d89586ffsjj9qb0gmb1stn00000004f0000000006hkm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:21 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49904	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:21 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:21 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:21 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 6afd71f5-301e-003f-7d9e-26266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092421Z-16849878b788tnsxzb2smucwdc00000008z000000000bpzm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 09:24:21 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49906	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:21 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:21 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:21 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 697bb720-201e-0071-0781-25ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092421Z-16849878b78hh85qc40uyr8sc800000000p00000000044p4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:21 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49905	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:21 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:21 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:21 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: bf00834f-601e-003d-3a28-266f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092421Z-17c5cb586f6zrq5bnguxgu7frc000000014000000000324c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:21 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49908	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:21 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:21 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 94ed9306-801e-0083-6af2-24f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092421Z-15b8d89586fsx9lfqmgrbzpgmg0000000g1g000000002ns6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:21 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49907	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:21 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:21 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 4673aea1-f01e-00aa-023d-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092421Z-17c5cb586f6hhlf5mrwgq3erx800000001b0000000005uwe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:21 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49909	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:22 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:22 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:22 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: a1fd626a-d01e-0017-5dfc-24b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092422Z-15b8d89586f6nn8zb8x99wuenc00000001b0000000005515 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:22 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49911	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 09:24:22 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 09:24:22 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:24:22 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: d17b1da0-901e-0064-5127-26e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T092422Z-r197bdfb6b4b4pw6nr8czsrctg00000000x0000000008f9a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 09:24:22 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Target ID:	0
Start time:	05:22:59
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	05:23:03
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1992,i,7894049459252343996,17293679398756792614,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	05:23:05
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT00NTQ5MjI1Zi1iOGVjLTQ5MWYtODYyMy03ODE1ZmYxMjg0ZjImcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2FsubscriΡtions&p=bT00NTQ5MjI1Zi1iOGVjLTQ5MWYtODYyMy03ODE1ZmYxMjg0ZjImcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

Windows Analysis Report
https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2FsubscriΡtions&p=bT00NTQ5MjI1Zi1iOGVjLTQ5MWYtODYyMy03ODE1ZmYxMjg0ZjImcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l