Edit tour

Windows Analysis Report
Https://mt5-deriv-server-02.netlify.app

Overview

General Information

Sample URL:	Https://mt5-deriv-server-02.netlify.app
Analysis ID:	1549918
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Detected non-DNS traffic on DNS port

Form action URLs do not match main URL

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

Suspicious form URL found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3468 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4176 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1948,i,11108705414528746962,15674714443463327163,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6344 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "Https://mt5-deriv-server-02.netlify.app" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://mt5-deriv-server-02.netlify.app/	LLM: Score: 8 Reasons: The brand 'Deriv' is known and associated with the domain 'deriv.com'., The URL 'mt5-deriv-server-02.netlify.app' does not match the legitimate domain 'deriv.com'., The use of 'netlify.app' suggests a hosting platform, which is commonly used for deploying web applications, but not typically for official brand domains., The presence of 'mt5-deriv-server-02' in the subdomain is suspicious and could indicate a phishing attempt, as it does not align with the standard domain structure of 'deriv.com'., The URL contains multiple hyphens and a subdomain structure that is not typical for a legitimate brand site. DOM: 1.0.pages.csv
Source: https://mt5-deriv-server-02.netlify.app/	LLM: Score: 9 Reasons: The brand 'Deriv' is known and associated with the domain 'deriv.com'., The URL 'mt5-deriv-server-02.netlify.app' does not match the legitimate domain 'deriv.com'., The use of 'netlify.app' suggests a hosting platform, which is commonly used for deploying web applications, but not typically for official brand domains., The presence of 'mt5-deriv-server-02' in the subdomain is suspicious and could indicate a phishing attempt, as it does not align with the standard domain structure of 'deriv.com'., The URL contains multiple hyphens and a subdomain structure that is not typical for a legitimate brand site., The input fields for 'Email' and 'Password' are common targets for phishing attacks. DOM: 1.1.pages.csv

Source: https://mt5-deriv-server-02.netlify.app/	HTTP Parser: Form action: https://e1l0el2c0.000webhostapp.com/bminary/home.php netlify 000webhostapp
Source: https://mt5-deriv-server-02.netlify.app/	HTTP Parser: Form action: https://e1l0el2c0.000webhostapp.com/bminary/home.php netlify 000webhostapp

Source: https://mt5-deriv-server-02.netlify.app/

HTTP Parser: Number of links: 0

Source: https://mt5-deriv-server-02.netlify.app/

HTTP Parser: Base64 decoded: <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"> <g fill="none" fill-rule="evenodd"> <g fill-rule="nonzero"> <g> <g> <g> <g> ...

Source: https://mt5-deriv-server-02.netlify.app/

HTTP Parser: Title: Log in | Deriv.com does not match URL

Source: https://mt5-deriv-server-02.netlify.app/	HTTP Parser: Form action: https://e1l0el2c0.000webhostapp.com/bminary/home.php
Source: https://mt5-deriv-server-02.netlify.app/	HTTP Parser: Form action: https://e1l0el2c0.000webhostapp.com/bminary/home.php

Source: https://mt5-deriv-server-02.netlify.app/

HTTP Parser: <input type="password" .../> found

Source: https://mt5-deriv-server-02.netlify.app/	HTTP Parser: No <meta name="author".. found
Source: https://mt5-deriv-server-02.netlify.app/	HTTP Parser: No <meta name="author".. found

Source: https://mt5-deriv-server-02.netlify.app/	HTTP Parser: No <meta name="copyright".. found
Source: https://mt5-deriv-server-02.netlify.app/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:53426 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.4:53421 -> 162.159.36.2:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.100.168
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.100.168
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: mt5-deriv-server-02.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: mt5-deriv-server-02.netlify.app
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: 15.164.165.52.in-addr.arpa

Source: chromecache_45.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/v2/auth?client_id=946366519426-7b697p8590q1a53pmc727iigp1gmbgit
Source: chromecache_45.1.dr	String found in binary or memory: https://appleid.apple.com/auth/authorize?client_id=com.deriv.svc.social-login&scope=openid%20ema
Source: chromecache_45.1.dr	String found in binary or memory: https://deriv.com/signup/
Source: chromecache_45.1.dr	String found in binary or memory: https://e1l0el2c0.000webhostapp.com/bminary/home.php
Source: chromecache_45.1.dr	String found in binary or memory: https://firebasestorage.googleapis.com/v0/b/app-deriv.appspot.com/o/favicon.webp?alt=media&token=3bd
Source: chromecache_45.1.dr	String found in binary or memory: https://firebasestorage.googleapis.com/v0/b/bnc-images.appspot.com/o/image-removebg-preview%20(1).pn
Source: chromecache_45.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=IBM
Source: chromecache_50.1.dr, chromecache_45.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjQ76AI5sdO_q.woff2)
Source: chromecache_50.1.dr, chromecache_45.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjQ76AI9sdO_q.woff2)
Source: chromecache_50.1.dr, chromecache_45.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjQ76AIFsdA.woff2)
Source: chromecache_50.1.dr, chromecache_45.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjQ76AIJsdO_q.woff2)
Source: chromecache_50.1.dr, chromecache_45.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjQ76AIVsdO_q.woff2)
Source: chromecache_50.1.dr, chromecache_45.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjQ76AIxsdO_q.woff2)
Source: chromecache_50.1.dr, chromecache_45.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjXr8AI5sdO_q.woff2)
Source: chromecache_50.1.dr, chromecache_45.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjXr8AI9sdO_q.woff2)
Source: chromecache_50.1.dr, chromecache_45.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjXr8AIFsdA.woff2)
Source: chromecache_50.1.dr, chromecache_45.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjXr8AIJsdO_q.woff2)
Source: chromecache_50.1.dr, chromecache_45.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjXr8AIVsdO_q.woff2)
Source: chromecache_50.1.dr, chromecache_45.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjXr8AIxsdO_q.woff2)
Source: chromecache_45.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKcQ72j00.woff2)
Source: chromecache_45.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKcg72j00.woff2)
Source: chromecache_45.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKcw72j00.woff2)
Source: chromecache_45.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKew72j00.woff2)
Source: chromecache_45.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfA72j00.woff2)
Source: chromecache_45.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2)
Source: chromecache_45.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjs2yNL4U.woff2)
Source: chromecache_45.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjsGyN.woff2)
Source: chromecache_45.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjtGyNL4U.woff2)
Source: chromecache_45.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjvGyNL4U.woff2)
Source: chromecache_45.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjvWyNL4U.woff2)
Source: chromecache_45.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjvmyNL4U.woff2)
Source: chromecache_45.1.dr	String found in binary or memory: https://static.deriv.app/css/oneall-deriv.css

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53444
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53565
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53564
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53442
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53563
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53441
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53562
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53448
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53569
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53447
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53568
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53446
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53567
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53445
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53566
Source: unknown	Network traffic detected: HTTP traffic on port 53552 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53443 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53575 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53451
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53572
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53450
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53571
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53570
Source: unknown	Network traffic detected: HTTP traffic on port 53466 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53437 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53569 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53489 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53500 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 53523 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53540 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53563 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53454 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53483 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53455
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53454
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53575
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53453
Source: unknown	Network traffic detected: HTTP traffic on port 53511 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53574
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53452
Source: unknown	Network traffic detected: HTTP traffic on port 53557 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53573
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53459
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53458
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53457
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53456
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53462
Source: unknown	Network traffic detected: HTTP traffic on port 53472 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53461
Source: unknown	Network traffic detected: HTTP traffic on port 53448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53460
Source: unknown	Network traffic detected: HTTP traffic on port 53505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53539 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53455 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53466
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53465
Source: unknown	Network traffic detected: HTTP traffic on port 53570 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53464
Source: unknown	Network traffic detected: HTTP traffic on port 53426 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53463
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53469
Source: unknown	Network traffic detected: HTTP traffic on port 53512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53468
Source: unknown	Network traffic detected: HTTP traffic on port 53551 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53467
Source: unknown	Network traffic detected: HTTP traffic on port 53494 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53473
Source: unknown	Network traffic detected: HTTP traffic on port 53471 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53472
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53471
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53470
Source: unknown	Network traffic detected: HTTP traffic on port 53506 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53460 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53477 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53477
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53476
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53475
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53474
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53479
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53478
Source: unknown	Network traffic detected: HTTP traffic on port 53517 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53480
Source: unknown	Network traffic detected: HTTP traffic on port 53528 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53484
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53483
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53482
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53481
Source: unknown	Network traffic detected: HTTP traffic on port 53545 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53562 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53529
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53528
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53527
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53526
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53521
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53520
Source: unknown	Network traffic detected: HTTP traffic on port 53556 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53525
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53524
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53523
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53522
Source: unknown	Network traffic detected: HTTP traffic on port 53533 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53527 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53504 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53450 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53515 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53539
Source: unknown	Network traffic detected: HTTP traffic on port 53479 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53538
Source: unknown	Network traffic detected: HTTP traffic on port 53433 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53537
Source: unknown	Network traffic detected: HTTP traffic on port 53567 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53532
Source: unknown	Network traffic detected: HTTP traffic on port 53462 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53531
Source: unknown	Network traffic detected: HTTP traffic on port 53571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53427 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53530
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53536
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53535
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53534
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53533
Source: unknown	Network traffic detected: HTTP traffic on port 53550 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53438 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53509 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53429
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53428
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53549
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53427
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53548
Source: unknown	Network traffic detected: HTTP traffic on port 53484 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53543
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53542
Source: unknown	Network traffic detected: HTTP traffic on port 53461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53541
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53540
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53426
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53547
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53546
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53545
Source: unknown	Network traffic detected: HTTP traffic on port 53516 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53544
Source: unknown	Network traffic detected: HTTP traffic on port 53445 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53550
Source: unknown	Network traffic detected: HTTP traffic on port 53439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53490 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53521 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53561 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53544 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53439
Source: unknown	Network traffic detected: HTTP traffic on port 53538 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53438
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53559
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53433
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53554
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53432
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53553
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53431
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53552
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53430
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53551
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53437
Source: unknown	Network traffic detected: HTTP traffic on port 53555 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53558
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53436
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53557
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53435
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53556
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53434
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53555
Source: unknown	Network traffic detected: HTTP traffic on port 53549 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53440
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53561
Source: unknown	Network traffic detected: HTTP traffic on port 53495 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53560
Source: unknown	Network traffic detected: HTTP traffic on port 53467 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 53434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53428 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53457 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53463 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53572 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53492 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53508 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53475 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53519 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53532 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53469 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53486 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53451 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53543 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53526 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53560 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53507
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53506
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53505
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53504
Source: unknown	Network traffic detected: HTTP traffic on port 53480 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53509
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53508
Source: unknown	Network traffic detected: HTTP traffic on port 53497 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53503
Source: unknown	Network traffic detected: HTTP traffic on port 53531 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53502
Source: unknown	Network traffic detected: HTTP traffic on port 53554 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53501
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53500
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53468 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53525 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53518
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53517
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53516
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53515
Source: unknown	Network traffic detected: HTTP traffic on port 53565 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53435 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53429 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53485 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53519
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53510
Source: unknown	Network traffic detected: HTTP traffic on port 53559 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53573 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53514
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53513
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53512
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53511
Source: unknown	Network traffic detected: HTTP traffic on port 53503 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53446 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53474 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53491 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53520 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53453 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53482 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53488
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53487
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53486
Source: unknown	Network traffic detected: HTTP traffic on port 53499 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53485
Source: unknown	Network traffic detected: HTTP traffic on port 53518 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53489
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53491
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53490
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53495
Source: unknown	Network traffic detected: HTTP traffic on port 53447 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53494
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53493
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53492
Source: unknown	Network traffic detected: HTTP traffic on port 53542 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53458 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53499
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53498
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53497
Source: unknown	Network traffic detected: HTTP traffic on port 53441 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53496
Source: unknown	Network traffic detected: HTTP traffic on port 53536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53553 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53501 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53574 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53465 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53547 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53568 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53430 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53564 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53459 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53535 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53487 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53529 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53481 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53431 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53513 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53530 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53470 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53436 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53507 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53541 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:53426 version: TLS 1.2

Source: classification engine

Classification label: mal48.phis.win@16/16@6/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1948,i,11108705414528746962,15674714443463327163,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "Https://mt5-deriv-server-02.netlify.app"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1948,i,11108705414528746962,15674714443463327163,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Obfuscated Files or Information	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
Https://mt5-deriv-server-02.netlify.app	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://static.deriv.app/css/oneall-deriv.css	0%	Avira URL Cloud	safe
https://e1l0el2c0.000webhostapp.com/bminary/home.php	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
www.google.com	172.217.18.4	true	false	high
mt5-deriv-server-02.netlify.app	3.125.36.175	true	true	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	high
15.164.165.52.in-addr.arpa	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://mt5-deriv-server-02.netlify.app/	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://static.deriv.app/css/oneall-deriv.css	chromecache_45.1.dr	false	Avira URL Cloud: safe	unknown
https://deriv.com/signup/	chromecache_45.1.dr	false		high
https://e1l0el2c0.000webhostapp.com/bminary/home.php	chromecache_45.1.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
3.125.36.175	mt5-deriv-server-02.netlify.app	United States	16509	AMAZON-02US	true
172.217.18.4	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.164	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1549918
Start date and time:	2024-11-06 08:52:20 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 10s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	Https://mt5-deriv-server-02.netlify.app
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@16/16@6/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.78, 142.250.185.99, 108.177.15.84, 34.104.35.123, 142.250.186.42, 142.250.186.170, 172.217.18.106, 142.250.181.234, 142.250.184.202, 216.58.206.74, 142.250.74.202, 216.58.212.138, 172.217.16.138, 172.217.18.10, 172.217.16.202, 142.250.185.106, 216.58.206.42, 142.250.186.138, 142.250.186.106, 142.250.184.234, 216.58.206.67, 142.250.185.202, 142.250.185.138, 142.250.185.234, 172.217.23.106, 142.250.186.74, 142.250.185.170, 142.250.185.74, 216.58.212.170, 4.245.163.56, 199.232.214.172, 192.229.221.95, 52.165.164.15, 20.12.23.50, 4.175.87.197, 172.217.18.99
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, clients2.google.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, wu-b-net.trafficmanager.net, firebasestorage.googleapis.com, glb.sls.prod.dcat.dsp.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: Https://mt5-deriv-server-02.netlify.app

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 44

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 207 x 56, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	11766
Entropy (8bit):	7.976951775825389
Encrypted:	false
SSDEEP:	192:1oFhjx1dM7I2PcI/5vgZgnt/RPSGzLCWxtlPDQAvYiCKrybp:1ehW1cMBp3TzLCEPPap
MD5:	C05089F14AC21E3C9A413097F401BF93
SHA1:	1C07C4B0F4C594FADC54E903914812FA2092C2CB
SHA-256:	7D020B05F6EAA00756667DD6AB0A0FBA6409515B254891F97FE353BBCE124A1E
SHA-512:	4613FBC53AFAC0D7FC7457B3BFA9AB8ABBE2CD4C0352DB2A467797FB8F797E2CA2F54B355508CB76D51D6C35779BA48AF5DE9D9F6DC4539A39301E9858868009
Malicious:	false
Reputation:	low
URL:	https://firebasestorage.googleapis.com/v0/b/bnc-images.appspot.com/o/image-removebg-preview%20(1).png?alt=media&token=b161747e-43d9-4134-af54-fff65cdb4dda
Preview:	.PNG........IHDR.......8.....Z.......sRGB....... .IDATx^.\|..V...{.....af(C.P..b....@.DE#..U.Q.=&A.M..r...`.3J. ..K.A...........3....$....w\|\|>.9......{.w.. ..y..-pB.@'tW.......<x. o...@.<'h..my......y......9A..o.[ .....[..-.......[....<+F..s.gpz(B=.B..h...T>.D~....w[..gN...5.~....:..1R4M3.u.4 ...WW..\|..m.....hu.YV>..n.....b......1..zt.fE..............hu..d..zh.C!...6`U..a..8....C.U=..w......Z.xV_~m......r..).`....0.f.61..+f...[.......<.N........Rt...{.@. ..6!Vu...Z...}.[.U.g....:g.....n.`.......4x>..G.\6.'.a.[.5X.U.......g.7:'..T..L]...x.A...m..?.XX.Zk0\..y...l<.....TT.A..0;..P......]....._.)?ly.......}..27..v%moc............h...\|...;..........@..._..<.#..C.L....:....#....a.....].....Z.....G.W....... .m..h2.T[+rn.h.......Pm .H./..=.rk1\..y....#..\|..=5...T.Nz....pL.F..Y..U'X..\@.."...........[......0o..5doL.\.u..~2.8...8K.!.#..0...B"#8l....F.....x.v.~~EEE,.....`....p.b.3.i.l;..5.i[......++..MN..!.c.}..e..r..9..?.......^ktn..2].@p..V....5.f-.}../

Chrome Cache Entry: 45

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2195), with CRLF line terminators
Category:	downloaded
Size (bytes):	43042
Entropy (8bit):	5.265923427997051
Encrypted:	false
SSDEEP:	384:qNEbOV5GJM5WE6aGRAmO6pEFvo8KcQn0B5Moi:qeNin6pKZvB5Moi
MD5:	48DFDC7D4394423B8D1DFACA7FCB11C3
SHA1:	3B4F9FD99A2638080FF44B68010ACCF12C7F8051
SHA-256:	E4CDDF99B0DD97A149D92EC74BC2CFFC761FF7EECDE09BED88A9761B01E9D4E4
SHA-512:	A274A3D713FB2093361BB4D9F2CA17D900C6A7982E6A711041F95ADC06B9E0DA0697AFB9FA2D04A3E28E3115CD8C0367D06B01825CB227C3C0953392A72B8850
Malicious:	false
Reputation:	low
URL:	https://mt5-deriv-server-02.netlify.app/
Preview:	<html><head>..<title>Log in \| Deriv.com </title>..<meta name="viewport" content="width=device-width, initial-scale=1.0">..<meta name="description" content="Log in to your Deriv online trading account and start trading on the most popular financial markets.">..<meta name="keywords" content="online trading, deriv trading, online trading account, deriv account">..<link rel="shortcut icon" href="https://firebasestorage.googleapis.com/v0/b/app-deriv.appspot.com/o/favicon.webp?alt=media&token=3bd14e55-5e85-4ab4-84a9-0ca96599413f">..<style>/! CSS Used from: Embedded /..{font-family:"IBM Plex Sans", sans-serif;}..a{color:var(--color-red);font-size:var(--text-size-xs);line-height:1.5;text-decoration:none;}..a:hover{cursor:pointer;text-decoration:underline;}../! CSS Used from: https://static.deriv.app/css/oneall-deriv.css */...provider#provider_google{background:var(--color-white);color:var(--color-grey-1);}...provider#provider_facebook{background:var(--color-blue);color:var(--color-white);}

Chrome Cache Entry: 46

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 20356, version 1.0
Category:	downloaded
Size (bytes):	20356
Entropy (8bit):	7.9886714421795215
Encrypted:	false
SSDEEP:	384:MyZzXviNz7P0MEYon8IRIhe6PaTT7uqrxowFQ46WK54Mx6agq4PmrJIwP:MczfiRArYonxRIhe6cNrll6TF+Bir
MD5:	E78568807D101B47DFD21E34244E072F
SHA1:	4CFC3C246E975C42EF684033A58AFDACF8D5F54B
SHA-256:	31535A91CE3F6B8ED3DDEDADAB1E49957E2220263A640DF1A3F14F6FDFE15EB6
SHA-512:	550A389C346B688DA31A377C829980571B4B8863EB8F52905B9A72AB437064E77304E35F31418EEFE982FBE32ACF531E6B439FDDC20E1165201DD72BAE5C8B03
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjQ76AIFsdA.woff2
Preview:	wOF2......O........8..O".........................F..6....`..l.@..s.....(..m.....6.$.. . ..&.....d...'.6..z....zV..`.w;.;..c3.............t.!.........8..]..3%..R.9W.)..r.9.5m.....<....o...CHq.j6..........EM..?DF...S...28..(....qh"..Y.xM.2K.$....w.Y._...gO.l...za....(^...".q.#Yu.KT.Ae..1.[ pD...C._SxBE.k.4g?ow....F..$@J.?J..N."B.....Q....3.Pd.V........p.........;@.l.......#$2E..E.F....w.JW..E.R].W.".@.........q....rZ.V....A.......^.%..u>..e..V]..$......:.......z.Kqr..yf....<...1.../KH....j...fF.<.+..fi..k....N.~..*B..Eg...:.......;.....:Uj?i...W`.;...E\..,.....i.....Ba...F.kl.k!F....d6>=....S..D..g.{......wF.~...V...E.\.H../....a.Jm..d...\l......VFa^7....'Y.V...W\|!......'......0..k......~........1.}.!..."....J....8.L..B.....j..,[..5.....3Y[T....b....Bz..!L..%Cv....9.......\M.A.s.$....m...-..n.r.n....Yo...a.T..J....'..>Sj.b..u.V.J. .h.h.8.G.Uk.Z&.O..'..(I(uh.e.#0.<(B....=v{...\..)"..d$H...=........Z(b.Y.c%W..7.l:...$.........d&.... ...l....>..

Chrome Cache Entry: 47

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 20352, version 1.0
Category:	downloaded
Size (bytes):	20352
Entropy (8bit):	7.9879619300389875
Encrypted:	false
SSDEEP:	384:LPCHfomn6UqBitVziumSFvlbW29TEmpqxwzE5XL2ttvFzoL2HvKorU/:+omn6U9ziuZtWDSqxwzgatrzni/
MD5:	A52805A61F88921CC4A33EFE93060D42
SHA1:	18323D3B29BAB07A7ADC1951B7085FAD13FC88D4
SHA-256:	BD8CF80AC0E7F7FA126A0CBE0F16D568325A156CA744E8F1E6AEF14A9F23E2B2
SHA-512:	4B321DDA9E2E17F62D1FDB6C61AB143324804C5A024CC770B7F4C72AAAF523B2756E92B9A1FAAEF7F1002627439274690E448EDEE86FEA64741FFE9FD1BA3372
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjXr8AIFsdA.woff2
Preview:	wOF2......O........$..O..........................F..j....`..l.>..s.....\|..T.....6.$.. . ........Z.=.'...Pp;...g.l....=....q....}....%....\.v....kD.P(2k.6F...4.e..e1.r;...l..Q..i..0m.....$dS.,.{.....zl4....._.<.C..@........K."...tE.)..........M.\....UP.lX...j...VR.w.....=l7..DIv..p...!.G._...}..f.(....5:2...M....?....}.m{.`.....V.....0...L...1......?~?.>.QK.I..J#$..N.1.....%...X..U..N.\y.5U+.:N..Q8[.....w'...5.......o..m..4E.......`...@n'.....'..:u....i..@..+..r..u.....x..;6C....C.._.~l..8...y.ct....&....!...,.3.%$!....M...H.:{.u.......\!L....y.U~.>@s...d...+..oU.[...F....6Vb........+..?.x....6.............cfs.....9.[?~.:.f..2KE.0@...T....s.M.%..5...&..o...-.=..a..Ck..B"..i]hx.k...QLO~b'.NJ\5..a..{.....!..O..9mb.O..=..G_0..`........1dS4.........;..$.B.n8..a.......!.j..'...K../.{..*..........2.R).)R..J.=.#.sJ.....Xtj]v...Jm.t....6...@.......g..T.U...5:J..&.2.>...A.p..M.J..Z./..<..S...-Bn..!..../..w..u..\|..X.....Y.......9...K^.E^F....p.o..:.wo!t&

Chrome Cache Entry: 48

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 207 x 56, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	11766
Entropy (8bit):	7.976951775825389
Encrypted:	false
SSDEEP:	192:1oFhjx1dM7I2PcI/5vgZgnt/RPSGzLCWxtlPDQAvYiCKrybp:1ehW1cMBp3TzLCEPPap
MD5:	C05089F14AC21E3C9A413097F401BF93
SHA1:	1C07C4B0F4C594FADC54E903914812FA2092C2CB
SHA-256:	7D020B05F6EAA00756667DD6AB0A0FBA6409515B254891F97FE353BBCE124A1E
SHA-512:	4613FBC53AFAC0D7FC7457B3BFA9AB8ABBE2CD4C0352DB2A467797FB8F797E2CA2F54B355508CB76D51D6C35779BA48AF5DE9D9F6DC4539A39301E9858868009
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......8.....Z.......sRGB....... .IDATx^.\|..V...{.....af(C.P..b....@.DE#..U.Q.=&A.M..r...`.3J. ..K.A...........3....$....w\|\|>.9......{.w.. ..y..-pB.@'tW.......<x. o...@.<'h..my......y......9A..o.[ .....[..-.......[....<+F..s.gpz(B=.B..h...T>.D~....w[..gN...5.~....:..1R4M3.u.4 ...WW..\|..m.....hu.YV>..n.....b......1..zt.fE..............hu..d..zh.C!...6`U..a..8....C.U=..w......Z.xV_~m......r..).`....0.f.61..+f...[.......<.N........Rt...{.@. ..6!Vu...Z...}.[.U.g....:g.....n.`.......4x>..G.\6.'.a.[.5X.U.......g.7:'..T..L]...x.A...m..?.XX.Zk0\..y...l<.....TT.A..0;..P......]....._.)?ly.......}..27..v%moc............h...\|...;..........@..._..<.#..C.L....:....#....a.....].....Z.....G.W....... .m..h2.T[+rn.h.......Pm .H./..=.rk1\..y....#..\|..=5...T.Nz....pL.F..Y..U'X..\@.."...........[......0o..5doL.\.u..~2.8...8K.!.#..0...B"#8l....F.....x.v.~~EEE,.....`....p.b.3.i.l;..5.i[......++..MN..!.c.}..e..r..9..?.......^ktn..2].@p..V....5.f-.}../

Chrome Cache Entry: 49

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.378783493486175
Encrypted:	false
SSDEEP:	3:qinPt:qyPt
MD5:	4C42AB4890733A2B01B1B3269C4855E7
SHA1:	5B68BFE664DCBC629042EA45C23954EEF1A9F698
SHA-256:	F69E8FC1414A82F108CFA0725E5211AF1865A9CEA342A5F01E6B2B5ABE47E010
SHA-512:	0631C6EFD555699CB2273107FE5AF565FEC2234344E2D412C23E4EE43C6D721CB2B058764622E44FD544D840FF64D7C866565E280127C701CAAB0A48C35D4F5C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwkwxnF_oarTOhIFDYOoWz0SBQ3OQUx6?alt=proto
Preview:	ChIKBw2DqFs9GgAKBw3OQUx6GgA=

Chrome Cache Entry: 50

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4552
Entropy (8bit):	5.5729777952189
Encrypted:	false
SSDEEP:	96:aO1aJBqO1aJDFZhO1aJt3/O1aJgO1aJbJc+ubO1aJHNLOxMaJ9qOxMaJfFZhOxMc:wJBAJjJt31J2J/KJYJ9rJkJh3yJVJTNA
MD5:	C0F9FC36CD238493A17B2327DC55F6C7
SHA1:	5A6181DD55807191DBFDD1D46DE7A871A6951339
SHA-256:	4348441E29F101DC491628FDECEA3D66DC02FBA94AA892B88965EE6EA56DD782
SHA-512:	511BA6B3C2BF1374A4BAAA66E557F72BDA5AF31D6A3F74F43254933FFC628E0D38552FA9643A20BAF2689856F2ECE9CABAD295F23F920171F77E4CBACA1F812C
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=IBM+Plex+Sans:300,600&display=swap"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'IBM Plex Sans';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjXr8AIxsdO_q.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'IBM Plex Sans';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjXr8AIVsdO_q.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek /.@font-face {. font-family: 'IBM Plex Sans';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjXr8AIJsdO_q.woff2) format('woff2');. unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;.}./ vietnamese */.@fon

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1256
Entropy (8bit):	7.741993402771102
Encrypted:	false
SSDEEP:	24:27/6P17EsCxwFyZT2b80LQdOU0cYdXTjxUkXS8i5k9JoJGEtrn:27/6BE2b8WU0Vikpi54obtrn
MD5:	E9567BAAB049FEF6AA004799FC873A05
SHA1:	4B83347180EF002F169ABCEE8778FCD17B7CEEAB
SHA-256:	F83D10277C189A2B291399466259183AA6427555CCD2252D09542CC0B8FBCAC5
SHA-512:	B957BD48BB43B6A7F3FB5E792753BABD09611C8CCCFDE873D72C0729E55E0DFB9A41824151413326F864F1FF44F305758A8FF2787A1C846FF40506930F8CCEF2
Malicious:	false
Reputation:	low
URL:	https://firebasestorage.googleapis.com/v0/b/app-deriv.appspot.com/o/favicon.webp?alt=media&token=3bd14e55-5e85-4ab4-84a9-0ca96599413f
Preview:	.PNG........IHDR... ... .....szz.....pHYs.................IDATX..W=.\U.~.31.$v...DA%....6s..d.{.J0mD,DRX.("..!...R.-.!...F...".......b......9..;.3;.......{.....l.,.Q...F..(U.r....J....2]O....]J\|J..*.y%....x....G.G..V%.U..,e7...l...9_..G.X.TR.+.?..u..q.l-.....}q ..a....U....>XX.#4.......\|,.D0.h.X.e.PW{/.\|.N..r..J\|[.......@A/.....Ob.M...9x..ef..g.!...6...P....X......q.....IWx.p.q......H=8.M<V2./.E..^.l.9.p.x.R.W.OH....6..C%>'P\|........B..yjmE.....o..e...B......@...{K)...L.3....1n..)._R.+mEK..\|.o.....].(F.).r.^._...T.O..5.En.+\|....y.u..K...9..{....9....(.~p.V....../D.._;..v....9h.Ai..X(_..j.....O..[.>...:..c...H3^.T.Z..P.3..?...+.{..v...CJ.&...i...<.......F.@......QJi.i.D.....g[.l.H\|!...pE......S.!x...}.}...%...".{.....I..%.A.o(Ut6...p<...u.;UHPl.....j..l..}F..x.....G+..U..&.V..[..;...=R...._C.6.....C..........x.dcX...).v.9.a.Ya>.2.I...hD.Y8.i2.l...C..Q.j..!D.... ]...X..0.4kBP}...VhN..Q.9....!D:.nV.+!I..{z..}./...6...B.f.......bPi...t......

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1256
Entropy (8bit):	7.741993402771102
Encrypted:	false
SSDEEP:	24:27/6P17EsCxwFyZT2b80LQdOU0cYdXTjxUkXS8i5k9JoJGEtrn:27/6BE2b8WU0Vikpi54obtrn
MD5:	E9567BAAB049FEF6AA004799FC873A05
SHA1:	4B83347180EF002F169ABCEE8778FCD17B7CEEAB
SHA-256:	F83D10277C189A2B291399466259183AA6427555CCD2252D09542CC0B8FBCAC5
SHA-512:	B957BD48BB43B6A7F3FB5E792753BABD09611C8CCCFDE873D72C0729E55E0DFB9A41824151413326F864F1FF44F305758A8FF2787A1C846FF40506930F8CCEF2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....pHYs.................IDATX..W=.\U.~.31.$v...DA%....6s..d.{.J0mD,DRX.("..!...R.-.!...F...".......b......9..;.3;.......{.....l.,.Q...F..(U.r....J....2]O....]J\|J..*.y%....x....G.G..V%.U..,e7...l...9_..G.X.TR.+.?..u..q.l-.....}q ..a....U....>XX.#4.......\|,.D0.h.X.e.PW{/.\|.N..r..J\|[.......@A/.....Ob.M...9x..ef..g.!...6...P....X......q.....IWx.p.q......H=8.M<V2./.E..^.l.9.p.x.R.W.OH....6..C%>'P\|........B..yjmE.....o..e...B......@...{K)...L.3....1n..)._R.+mEK..\|.o.....].(F.).r.^._...T.O..5.En.+\|....y.u..K...9..{....9....(.~p.V....../D.._;..v....9h.Ai..X(_..j.....O..[.>...:..c...H3^.T.Z..P.3..?...+.{..v...CJ.&...i...<.......F.@......QJi.i.D.....g[.l.H\|!...pE......S.!x...}.}...%...".{.....I..%.A.o(Ut6...p<...u.;UHPl.....j..l..}F..x.....G+..U..&.V..[..;...=R...._C.6.....C..........x.dcX...).v.9.a.Ya>.2.I...hD.Y8.i2.l...C..Q.j..!D.... ]...X..0.4kBP}...VhN..Q.9....!D:.nV.+!I..{z..}./...6...B.f.......bPi...t......

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 6, 2024 08:53:16.684588909 CET	49675	443	192.168.2.4	173.222.162.32
Nov 6, 2024 08:53:18.718982935 CET	49735	443	192.168.2.4	3.125.36.175
Nov 6, 2024 08:53:18.719036102 CET	443	49735	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:18.719110012 CET	49735	443	192.168.2.4	3.125.36.175
Nov 6, 2024 08:53:18.719293118 CET	49736	443	192.168.2.4	3.125.36.175
Nov 6, 2024 08:53:18.719317913 CET	443	49736	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:18.719594002 CET	49735	443	192.168.2.4	3.125.36.175
Nov 6, 2024 08:53:18.719621897 CET	443	49735	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:18.719634056 CET	49736	443	192.168.2.4	3.125.36.175
Nov 6, 2024 08:53:18.719924927 CET	49736	443	192.168.2.4	3.125.36.175
Nov 6, 2024 08:53:18.719930887 CET	443	49736	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:19.559623003 CET	443	49736	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:19.566792965 CET	49736	443	192.168.2.4	3.125.36.175
Nov 6, 2024 08:53:19.566809893 CET	443	49736	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:19.567142010 CET	443	49735	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:19.567363977 CET	49735	443	192.168.2.4	3.125.36.175
Nov 6, 2024 08:53:19.567377090 CET	443	49735	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:19.567687035 CET	443	49736	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:19.567744970 CET	49736	443	192.168.2.4	3.125.36.175
Nov 6, 2024 08:53:19.568269014 CET	443	49735	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:19.568335056 CET	49735	443	192.168.2.4	3.125.36.175
Nov 6, 2024 08:53:19.570595026 CET	49736	443	192.168.2.4	3.125.36.175
Nov 6, 2024 08:53:19.570657015 CET	443	49736	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:19.570966959 CET	49735	443	192.168.2.4	3.125.36.175
Nov 6, 2024 08:53:19.571028948 CET	443	49735	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:19.571305037 CET	49736	443	192.168.2.4	3.125.36.175
Nov 6, 2024 08:53:19.571316004 CET	443	49736	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:19.621247053 CET	49736	443	192.168.2.4	3.125.36.175
Nov 6, 2024 08:53:19.621483088 CET	49735	443	192.168.2.4	3.125.36.175
Nov 6, 2024 08:53:19.621496916 CET	443	49735	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:19.663193941 CET	49735	443	192.168.2.4	3.125.36.175
Nov 6, 2024 08:53:19.927757025 CET	443	49736	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:19.927797079 CET	443	49736	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:19.927848101 CET	443	49736	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:19.927854061 CET	49736	443	192.168.2.4	3.125.36.175
Nov 6, 2024 08:53:19.927855968 CET	443	49736	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:19.927886963 CET	443	49736	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:19.927920103 CET	49736	443	192.168.2.4	3.125.36.175
Nov 6, 2024 08:53:19.972906113 CET	49736	443	192.168.2.4	3.125.36.175
Nov 6, 2024 08:53:20.044547081 CET	443	49736	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:20.044554949 CET	443	49736	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:20.044585943 CET	443	49736	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:20.044629097 CET	49736	443	192.168.2.4	3.125.36.175
Nov 6, 2024 08:53:20.045547009 CET	443	49736	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:20.045553923 CET	443	49736	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:20.045627117 CET	49736	443	192.168.2.4	3.125.36.175
Nov 6, 2024 08:53:20.045634985 CET	443	49736	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:20.045681953 CET	49736	443	192.168.2.4	3.125.36.175
Nov 6, 2024 08:53:20.046752930 CET	443	49736	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:20.046761036 CET	443	49736	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:20.046822071 CET	49736	443	192.168.2.4	3.125.36.175
Nov 6, 2024 08:53:20.046828032 CET	443	49736	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:20.091001034 CET	49736	443	192.168.2.4	3.125.36.175
Nov 6, 2024 08:53:20.161783934 CET	443	49736	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:20.161791086 CET	443	49736	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:20.161813974 CET	443	49736	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:20.161844015 CET	49736	443	192.168.2.4	3.125.36.175
Nov 6, 2024 08:53:20.162086010 CET	443	49736	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:20.162096977 CET	443	49736	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:20.162130117 CET	49736	443	192.168.2.4	3.125.36.175
Nov 6, 2024 08:53:20.162134886 CET	443	49736	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:20.162170887 CET	443	49736	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:20.162177086 CET	49736	443	192.168.2.4	3.125.36.175
Nov 6, 2024 08:53:20.162214994 CET	49736	443	192.168.2.4	3.125.36.175
Nov 6, 2024 08:53:20.232601881 CET	49736	443	192.168.2.4	3.125.36.175
Nov 6, 2024 08:53:20.232614994 CET	443	49736	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:21.342802048 CET	49741	443	192.168.2.4	172.217.18.4
Nov 6, 2024 08:53:21.342845917 CET	443	49741	172.217.18.4	192.168.2.4
Nov 6, 2024 08:53:21.342931032 CET	49741	443	192.168.2.4	172.217.18.4
Nov 6, 2024 08:53:21.343374968 CET	49741	443	192.168.2.4	172.217.18.4
Nov 6, 2024 08:53:21.343389988 CET	443	49741	172.217.18.4	192.168.2.4
Nov 6, 2024 08:53:22.207791090 CET	443	49741	172.217.18.4	192.168.2.4
Nov 6, 2024 08:53:22.213047981 CET	49741	443	192.168.2.4	172.217.18.4
Nov 6, 2024 08:53:22.213061094 CET	443	49741	172.217.18.4	192.168.2.4
Nov 6, 2024 08:53:22.214044094 CET	443	49741	172.217.18.4	192.168.2.4
Nov 6, 2024 08:53:22.214131117 CET	49741	443	192.168.2.4	172.217.18.4
Nov 6, 2024 08:53:22.223404884 CET	49741	443	192.168.2.4	172.217.18.4
Nov 6, 2024 08:53:22.223473072 CET	443	49741	172.217.18.4	192.168.2.4
Nov 6, 2024 08:53:22.277998924 CET	49741	443	192.168.2.4	172.217.18.4
Nov 6, 2024 08:53:22.278011084 CET	443	49741	172.217.18.4	192.168.2.4
Nov 6, 2024 08:53:22.323331118 CET	49741	443	192.168.2.4	172.217.18.4
Nov 6, 2024 08:53:22.794437885 CET	49745	443	192.168.2.4	184.28.90.27
Nov 6, 2024 08:53:22.794467926 CET	443	49745	184.28.90.27	192.168.2.4
Nov 6, 2024 08:53:22.794722080 CET	49745	443	192.168.2.4	184.28.90.27
Nov 6, 2024 08:53:22.796246052 CET	49745	443	192.168.2.4	184.28.90.27
Nov 6, 2024 08:53:22.796257973 CET	443	49745	184.28.90.27	192.168.2.4
Nov 6, 2024 08:53:23.645911932 CET	443	49745	184.28.90.27	192.168.2.4
Nov 6, 2024 08:53:23.645979881 CET	49745	443	192.168.2.4	184.28.90.27
Nov 6, 2024 08:53:23.652461052 CET	49745	443	192.168.2.4	184.28.90.27
Nov 6, 2024 08:53:23.652477980 CET	443	49745	184.28.90.27	192.168.2.4
Nov 6, 2024 08:53:23.652709961 CET	443	49745	184.28.90.27	192.168.2.4
Nov 6, 2024 08:53:23.703306913 CET	49745	443	192.168.2.4	184.28.90.27
Nov 6, 2024 08:53:23.782442093 CET	49745	443	192.168.2.4	184.28.90.27
Nov 6, 2024 08:53:23.823337078 CET	443	49745	184.28.90.27	192.168.2.4
Nov 6, 2024 08:53:24.029594898 CET	443	49745	184.28.90.27	192.168.2.4
Nov 6, 2024 08:53:24.029648066 CET	443	49745	184.28.90.27	192.168.2.4
Nov 6, 2024 08:53:24.029706955 CET	49745	443	192.168.2.4	184.28.90.27
Nov 6, 2024 08:53:24.287524939 CET	49745	443	192.168.2.4	184.28.90.27
Nov 6, 2024 08:53:24.287544012 CET	443	49745	184.28.90.27	192.168.2.4
Nov 6, 2024 08:53:24.417371035 CET	49748	443	192.168.2.4	184.28.90.27
Nov 6, 2024 08:53:24.417401075 CET	443	49748	184.28.90.27	192.168.2.4
Nov 6, 2024 08:53:24.417500019 CET	49748	443	192.168.2.4	184.28.90.27
Nov 6, 2024 08:53:24.417824030 CET	49748	443	192.168.2.4	184.28.90.27
Nov 6, 2024 08:53:24.417834997 CET	443	49748	184.28.90.27	192.168.2.4
Nov 6, 2024 08:53:24.811151028 CET	443	49735	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:24.811214924 CET	443	49735	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:24.811465025 CET	49735	443	192.168.2.4	3.125.36.175
Nov 6, 2024 08:53:24.888392925 CET	49735	443	192.168.2.4	3.125.36.175
Nov 6, 2024 08:53:24.888418913 CET	443	49735	3.125.36.175	192.168.2.4
Nov 6, 2024 08:53:25.264668941 CET	443	49748	184.28.90.27	192.168.2.4
Nov 6, 2024 08:53:25.264745951 CET	49748	443	192.168.2.4	184.28.90.27
Nov 6, 2024 08:53:25.265928984 CET	49748	443	192.168.2.4	184.28.90.27
Nov 6, 2024 08:53:25.265935898 CET	443	49748	184.28.90.27	192.168.2.4
Nov 6, 2024 08:53:25.266138077 CET	443	49748	184.28.90.27	192.168.2.4
Nov 6, 2024 08:53:25.267791986 CET	49748	443	192.168.2.4	184.28.90.27
Nov 6, 2024 08:53:25.311331034 CET	443	49748	184.28.90.27	192.168.2.4
Nov 6, 2024 08:53:25.513683081 CET	443	49748	184.28.90.27	192.168.2.4
Nov 6, 2024 08:53:25.513729095 CET	443	49748	184.28.90.27	192.168.2.4
Nov 6, 2024 08:53:25.513788939 CET	49748	443	192.168.2.4	184.28.90.27
Nov 6, 2024 08:53:25.514884949 CET	49748	443	192.168.2.4	184.28.90.27
Nov 6, 2024 08:53:25.514895916 CET	443	49748	184.28.90.27	192.168.2.4
Nov 6, 2024 08:53:32.209556103 CET	443	49741	172.217.18.4	192.168.2.4
Nov 6, 2024 08:53:32.209614992 CET	443	49741	172.217.18.4	192.168.2.4
Nov 6, 2024 08:53:32.209686041 CET	49741	443	192.168.2.4	172.217.18.4
Nov 6, 2024 08:53:33.393356085 CET	49741	443	192.168.2.4	172.217.18.4
Nov 6, 2024 08:53:33.393385887 CET	443	49741	172.217.18.4	192.168.2.4
Nov 6, 2024 08:53:34.086910963 CET	49723	80	192.168.2.4	2.16.100.168
Nov 6, 2024 08:53:34.093360901 CET	80	49723	2.16.100.168	192.168.2.4
Nov 6, 2024 08:53:34.093436956 CET	49723	80	192.168.2.4	2.16.100.168
Nov 6, 2024 08:53:45.879010916 CET	53421	53	192.168.2.4	162.159.36.2
Nov 6, 2024 08:53:45.883843899 CET	53	53421	162.159.36.2	192.168.2.4
Nov 6, 2024 08:53:45.883904934 CET	53421	53	192.168.2.4	162.159.36.2
Nov 6, 2024 08:53:45.883980036 CET	53421	53	192.168.2.4	162.159.36.2
Nov 6, 2024 08:53:45.889173985 CET	53	53421	162.159.36.2	192.168.2.4
Nov 6, 2024 08:53:46.477164030 CET	53	53421	162.159.36.2	192.168.2.4
Nov 6, 2024 08:53:46.477878094 CET	53421	53	192.168.2.4	162.159.36.2
Nov 6, 2024 08:53:46.483103991 CET	53	53421	162.159.36.2	192.168.2.4
Nov 6, 2024 08:53:46.483160973 CET	53421	53	192.168.2.4	162.159.36.2
Nov 6, 2024 08:54:11.608935118 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:11.608952999 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:11.609049082 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:11.610141993 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:11.610153913 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.360253096 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.360377073 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:12.361798048 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:12.361804962 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.361996889 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.369143963 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:12.415326118 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.684644938 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.684657097 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.684680939 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.684763908 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:12.684763908 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:12.684781075 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.684948921 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:12.690072060 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.690090895 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.690164089 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:12.690171003 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.690396070 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:12.721328020 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.721343994 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.721462965 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:12.721470118 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.721610069 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:12.735656977 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.735671997 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.735860109 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:12.735866070 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.736023903 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:12.737354040 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.737369061 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.737453938 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:12.737458944 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.737509966 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:12.739952087 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.739969969 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.740056992 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:12.740056992 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:12.740062952 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.740349054 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:12.843589067 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.843607903 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.843724012 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:12.843724012 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:12.843733072 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.843904972 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:12.854928970 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.854948997 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.855052948 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:12.855058908 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.855079889 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.855098963 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.855181932 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.855225086 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:12.855232000 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.855266094 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:12.855350971 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:12.855743885 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.855763912 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.855837107 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:12.855837107 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:12.855844021 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.860836983 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.860853910 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.860943079 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:12.860948086 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.861008883 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.861022949 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.861061096 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:12.861067057 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.861095905 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:12.902045965 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:12.958966970 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.959019899 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.959059000 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:12.959125042 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:12.959125042 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:12.959136009 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:12.959167957 CET	53426	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:12.959175110 CET	443	53426	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.006141901 CET	53427	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.006159067 CET	443	53427	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.006217957 CET	53427	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.007778883 CET	53428	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.007800102 CET	443	53428	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.007858992 CET	53428	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.008191109 CET	53427	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.008200884 CET	443	53427	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.009244919 CET	53428	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.009257078 CET	443	53428	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.009967089 CET	53429	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.009983063 CET	443	53429	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.010078907 CET	53429	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.010314941 CET	53429	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.010328054 CET	443	53429	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.011416912 CET	53430	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.011425018 CET	443	53430	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.011476040 CET	53430	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.011972904 CET	53431	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.011981964 CET	443	53431	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.012038946 CET	53431	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.012209892 CET	53431	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.012223005 CET	443	53431	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.012469053 CET	53430	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.012476921 CET	443	53430	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.727495909 CET	443	53431	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.728137016 CET	53431	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.728167057 CET	443	53431	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.728619099 CET	53431	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.728625059 CET	443	53431	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.749227047 CET	443	53429	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.749886036 CET	53429	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.749902964 CET	443	53429	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.750106096 CET	443	53427	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.750577927 CET	53429	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.750582933 CET	443	53429	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.750711918 CET	443	53430	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.751094103 CET	53427	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.751111984 CET	443	53427	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.751487970 CET	53427	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.751492023 CET	443	53427	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.751636028 CET	53430	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.751665115 CET	443	53430	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.752038002 CET	53430	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.752043009 CET	443	53430	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.771451950 CET	443	53428	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.771862030 CET	53428	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.771872997 CET	443	53428	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.772336960 CET	53428	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.772340059 CET	443	53428	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.861669064 CET	443	53431	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.861685038 CET	443	53431	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.861721992 CET	443	53431	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.861732960 CET	53431	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.861783981 CET	53431	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.862031937 CET	53431	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.862047911 CET	443	53431	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.862057924 CET	53431	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.862062931 CET	443	53431	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.864835024 CET	53432	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.864870071 CET	443	53432	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.864940882 CET	53432	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.865092993 CET	53432	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.865104914 CET	443	53432	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.878920078 CET	443	53429	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.878971100 CET	443	53429	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.879040003 CET	53429	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.879136086 CET	53429	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.879136086 CET	53429	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.879142046 CET	443	53429	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.879148960 CET	443	53429	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.880825043 CET	443	53430	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.880847931 CET	443	53430	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.880908966 CET	443	53430	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.880924940 CET	53430	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.880958080 CET	53430	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.881100893 CET	53430	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.881112099 CET	443	53430	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.881117105 CET	53430	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.881122112 CET	443	53430	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.881405115 CET	53433	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.881432056 CET	443	53433	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.881769896 CET	53433	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.882006884 CET	53433	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.882018089 CET	443	53433	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.882204056 CET	443	53427	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.882229090 CET	443	53427	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.882282972 CET	53427	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.882302046 CET	443	53427	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.882431030 CET	53427	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.882492065 CET	53427	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.882497072 CET	443	53427	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.882514000 CET	53427	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.882616997 CET	443	53427	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.882644892 CET	443	53427	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.882682085 CET	53427	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.883608103 CET	53434	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.883616924 CET	443	53434	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.883766890 CET	53434	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.883894920 CET	53434	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.883903980 CET	443	53434	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.884197950 CET	53435	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.884207010 CET	443	53435	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.884260893 CET	53435	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.884413004 CET	53435	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.884418964 CET	443	53435	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.903222084 CET	443	53428	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.903279066 CET	443	53428	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.903328896 CET	53428	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.903429031 CET	53428	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.903434992 CET	443	53428	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.903445005 CET	53428	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.903453112 CET	443	53428	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.905231953 CET	53436	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.905263901 CET	443	53436	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:13.905510902 CET	53436	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.905649900 CET	53436	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:13.905662060 CET	443	53436	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.595525026 CET	443	53432	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.596028090 CET	53432	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.596050978 CET	443	53432	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.596437931 CET	53432	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.596442938 CET	443	53432	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.609291077 CET	443	53433	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.609965086 CET	53433	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.609965086 CET	53433	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.609977961 CET	443	53433	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.609992027 CET	443	53433	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.610784054 CET	443	53435	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.611377954 CET	53435	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.611377954 CET	53435	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.611388922 CET	443	53435	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.611399889 CET	443	53435	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.619610071 CET	443	53434	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.620018959 CET	53434	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.620038986 CET	443	53434	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.620218992 CET	53434	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.620223045 CET	443	53434	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.635649920 CET	443	53436	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.635952950 CET	53436	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.635979891 CET	443	53436	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.636471033 CET	53436	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.636476040 CET	443	53436	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.728810072 CET	443	53432	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.729020119 CET	443	53432	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.729170084 CET	53432	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.729170084 CET	53432	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.729193926 CET	53432	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.729202986 CET	443	53432	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.731734991 CET	53437	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.731766939 CET	443	53437	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.731837034 CET	53437	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.731985092 CET	53437	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.732007980 CET	443	53437	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.738652945 CET	443	53433	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.738930941 CET	443	53433	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.739018917 CET	53433	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.739018917 CET	53433	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.739038944 CET	53433	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.739048958 CET	443	53433	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.740156889 CET	443	53435	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.740216970 CET	443	53435	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.740350962 CET	53435	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.740417957 CET	53435	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.740417957 CET	53435	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.740425110 CET	443	53435	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.740431070 CET	443	53435	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.741029024 CET	53438	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.741050959 CET	443	53438	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.741223097 CET	53438	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.741370916 CET	53438	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.741381884 CET	443	53438	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.742469072 CET	53439	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.742485046 CET	443	53439	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.742670059 CET	53439	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.742885113 CET	53439	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.742898941 CET	443	53439	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.749927044 CET	443	53434	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.750085115 CET	443	53434	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.750153065 CET	53434	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.750166893 CET	53434	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.750166893 CET	53434	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.750174046 CET	443	53434	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.750180960 CET	443	53434	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.752082109 CET	53440	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.752089977 CET	443	53440	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.752244949 CET	53440	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.752288103 CET	53440	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.752299070 CET	443	53440	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.764112949 CET	443	53436	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.764595032 CET	443	53436	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.764698982 CET	53436	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.764698982 CET	53436	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.764734030 CET	53436	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.764739990 CET	443	53436	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.766540051 CET	53441	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.766547918 CET	443	53441	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:14.766716957 CET	53441	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.766742945 CET	53441	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:14.766746044 CET	443	53441	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.448745012 CET	443	53437	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.449248075 CET	53437	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.449269056 CET	443	53437	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.449748039 CET	53437	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.449754953 CET	443	53437	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.488847017 CET	443	53440	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.489269972 CET	53440	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.489286900 CET	443	53440	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.489831924 CET	53440	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.489837885 CET	443	53440	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.489902973 CET	443	53438	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.490495920 CET	53438	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.490509033 CET	443	53438	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.491055965 CET	53438	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.491060019 CET	443	53438	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.505489111 CET	443	53441	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.505907059 CET	53441	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.505913973 CET	443	53441	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.506310940 CET	53441	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.506314993 CET	443	53441	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.507667065 CET	443	53439	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.507977009 CET	53439	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.507989883 CET	443	53439	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.508313894 CET	53439	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.508318901 CET	443	53439	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.577474117 CET	443	53437	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.577739000 CET	443	53437	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.577790976 CET	53437	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.577833891 CET	53437	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.577833891 CET	53437	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.577852011 CET	443	53437	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.577861071 CET	443	53437	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.580408096 CET	53442	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.580430031 CET	443	53442	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.580493927 CET	53442	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.580602884 CET	53442	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.580616951 CET	443	53442	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.619735956 CET	443	53440	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.619786978 CET	443	53440	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.619915962 CET	53440	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.619949102 CET	53440	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.619949102 CET	53440	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.619960070 CET	443	53440	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.619972944 CET	443	53440	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.620213985 CET	443	53438	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.620270014 CET	443	53438	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.620392084 CET	53438	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.620848894 CET	53438	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.620856047 CET	443	53438	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.620865107 CET	53438	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.620871067 CET	443	53438	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.622853041 CET	53443	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.622867107 CET	443	53443	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.622950077 CET	53443	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.623059988 CET	53443	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.623074055 CET	443	53443	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.623114109 CET	53444	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.623137951 CET	443	53444	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.623214006 CET	53444	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.623321056 CET	53444	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.623333931 CET	443	53444	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.636517048 CET	443	53441	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.637001991 CET	443	53441	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.637054920 CET	53441	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.637093067 CET	53441	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.637093067 CET	53441	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.637099981 CET	443	53441	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.637108088 CET	443	53441	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.639019966 CET	53445	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.639048100 CET	443	53445	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.639210939 CET	53445	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.639345884 CET	53445	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.639358044 CET	443	53445	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.643064022 CET	443	53439	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.643398046 CET	443	53439	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.643450975 CET	53439	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.643500090 CET	53439	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.643500090 CET	53439	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.643508911 CET	443	53439	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.643522978 CET	443	53439	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.645409107 CET	53446	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.645427942 CET	443	53446	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:15.645519972 CET	53446	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.645620108 CET	53446	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:15.645632982 CET	443	53446	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.320446968 CET	443	53442	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.321019888 CET	53442	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.321039915 CET	443	53442	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.322216034 CET	53442	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.322222948 CET	443	53442	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.350413084 CET	443	53444	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.351332903 CET	53444	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.351341963 CET	443	53444	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.352313042 CET	53444	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.352319002 CET	443	53444	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.360373020 CET	443	53443	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.360805035 CET	53443	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.360816956 CET	443	53443	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.361464024 CET	53443	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.361469030 CET	443	53443	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.372688055 CET	443	53446	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.373038054 CET	53446	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.373044014 CET	443	53446	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.373691082 CET	53446	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.373694897 CET	443	53446	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.400965929 CET	443	53445	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.401319027 CET	53445	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.401330948 CET	443	53445	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.402093887 CET	53445	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.402110100 CET	443	53445	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.457526922 CET	443	53442	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.457570076 CET	443	53442	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.457632065 CET	53442	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.457828045 CET	53442	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.457828045 CET	53442	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.457844973 CET	443	53442	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.457854033 CET	443	53442	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.460927963 CET	53447	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.460957050 CET	443	53447	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.461213112 CET	53447	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.461429119 CET	53447	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.461441994 CET	443	53447	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.477662086 CET	443	53444	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.477772951 CET	443	53444	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.477859974 CET	53444	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.478236914 CET	53444	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.478236914 CET	53444	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.478259087 CET	443	53444	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.478267908 CET	443	53444	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.482944965 CET	53448	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.482988119 CET	443	53448	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.483083963 CET	53448	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.483273983 CET	53448	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.483290911 CET	443	53448	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.491986036 CET	443	53443	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.492130995 CET	443	53443	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.492275000 CET	53443	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.492369890 CET	53443	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.492383003 CET	443	53443	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.492400885 CET	53443	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.492405891 CET	443	53443	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.496840000 CET	53450	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.496849060 CET	443	53450	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.496901989 CET	53450	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.497206926 CET	53450	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.497219086 CET	443	53450	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.501422882 CET	443	53446	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.501557112 CET	443	53446	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.501621008 CET	53446	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.501826048 CET	53446	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.501826048 CET	53446	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.501832962 CET	443	53446	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.501840115 CET	443	53446	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.505780935 CET	53451	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.505805016 CET	443	53451	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.505975008 CET	53451	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.506387949 CET	53451	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.506401062 CET	443	53451	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.536946058 CET	443	53445	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.537118912 CET	443	53445	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.537178040 CET	53445	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.537481070 CET	53445	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.537488937 CET	443	53445	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.537534952 CET	53445	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.537539959 CET	443	53445	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.567768097 CET	53452	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.567785978 CET	443	53452	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:16.567852020 CET	53452	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.568129063 CET	53452	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:16.568135977 CET	443	53452	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.189930916 CET	443	53447	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.190916061 CET	53447	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.190934896 CET	443	53447	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.192197084 CET	53447	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.192202091 CET	443	53447	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.210602999 CET	443	53448	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.211761951 CET	53448	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.211786032 CET	443	53448	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.212541103 CET	53448	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.212547064 CET	443	53448	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.216171980 CET	443	53450	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.238713026 CET	443	53451	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.253994942 CET	53450	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.254007101 CET	443	53450	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.254905939 CET	53450	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.254910946 CET	443	53450	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.274034023 CET	53451	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.274054050 CET	443	53451	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.274580002 CET	53451	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.274585962 CET	443	53451	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.296192884 CET	443	53452	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.321448088 CET	443	53447	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.321486950 CET	443	53447	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.321584940 CET	53447	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.339206934 CET	53452	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.348429918 CET	443	53448	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.348475933 CET	443	53448	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.348531008 CET	53448	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.378112078 CET	443	53450	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.378156900 CET	443	53450	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.378209114 CET	53450	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.403090000 CET	443	53451	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.403177977 CET	443	53451	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.403310061 CET	53451	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.573668003 CET	53452	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.573676109 CET	443	53452	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.579713106 CET	53452	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.579716921 CET	443	53452	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.582631111 CET	53450	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.582652092 CET	443	53450	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.582662106 CET	53450	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.582668066 CET	443	53450	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.582731009 CET	53451	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.582750082 CET	443	53451	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.582782030 CET	53451	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.582787037 CET	443	53451	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.681025982 CET	53447	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.681044102 CET	443	53447	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.681080103 CET	53447	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.681085110 CET	443	53447	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.683892012 CET	53448	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.683906078 CET	443	53448	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.683914900 CET	53448	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.683917999 CET	443	53448	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.684746981 CET	53453	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.684766054 CET	443	53453	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.684822083 CET	53453	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.693001986 CET	53453	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.693010092 CET	443	53453	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.696815014 CET	53454	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.696830988 CET	443	53454	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.696962118 CET	53454	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.697294950 CET	53454	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.697304010 CET	443	53454	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.699691057 CET	53455	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.699698925 CET	443	53455	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.699764967 CET	53455	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.700814962 CET	53455	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.700826883 CET	443	53455	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.702687025 CET	53456	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.702711105 CET	443	53456	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.702827930 CET	53456	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.703041077 CET	53456	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.703052998 CET	443	53456	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.705692053 CET	443	53452	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.706115961 CET	443	53452	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.706172943 CET	53452	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.706414938 CET	53452	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.706420898 CET	443	53452	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.709950924 CET	53457	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.709973097 CET	443	53457	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:17.710071087 CET	53457	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.710262060 CET	53457	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:17.710274935 CET	443	53457	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.418680906 CET	443	53453	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.419126987 CET	53453	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.419146061 CET	443	53453	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.419651985 CET	53453	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.419656038 CET	443	53453	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.435554028 CET	443	53454	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.435904980 CET	53454	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.435920000 CET	443	53454	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.436474085 CET	53454	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.436477900 CET	443	53454	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.436954975 CET	443	53456	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.437292099 CET	53456	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.437314987 CET	443	53456	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.437746048 CET	53456	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.437751055 CET	443	53456	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.438801050 CET	443	53455	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.439245939 CET	53455	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.439265966 CET	443	53455	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.439616919 CET	53455	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.439623117 CET	443	53455	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.443171978 CET	443	53457	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.443603992 CET	53457	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.443624020 CET	443	53457	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.443998098 CET	53457	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.444005013 CET	443	53457	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.549344063 CET	443	53453	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.549406052 CET	443	53453	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.549567938 CET	53453	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.549693108 CET	53453	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.549710035 CET	443	53453	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.549722910 CET	53453	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.549726963 CET	443	53453	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.552309036 CET	53458	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.552337885 CET	443	53458	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.552396059 CET	53458	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.552548885 CET	53458	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.552561998 CET	443	53458	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.569070101 CET	443	53454	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.569200993 CET	443	53454	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.569289923 CET	53454	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.569323063 CET	53454	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.569335938 CET	443	53454	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.569344044 CET	53454	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.569348097 CET	443	53454	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.569370985 CET	443	53456	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.570128918 CET	443	53456	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.570173025 CET	53456	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.570214033 CET	53456	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.570224047 CET	443	53456	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.570234060 CET	53456	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.570238113 CET	443	53456	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.571688890 CET	53459	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.571719885 CET	443	53459	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.571784019 CET	53459	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.571964979 CET	53459	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.571980000 CET	443	53459	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.572093010 CET	53460	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.572108984 CET	443	53460	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.572185993 CET	53460	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.572328091 CET	53460	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.572339058 CET	443	53460	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.572865963 CET	443	53457	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.572890043 CET	443	53455	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.572973967 CET	443	53457	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.572995901 CET	443	53455	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.573034048 CET	53457	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.573057890 CET	53455	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.573082924 CET	53455	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.573087931 CET	443	53455	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.573096037 CET	53455	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.573098898 CET	443	53455	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.573163986 CET	53457	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.573172092 CET	443	53457	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.573209047 CET	53457	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.573213100 CET	443	53457	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.575213909 CET	53461	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.575231075 CET	443	53461	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.575269938 CET	53462	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.575277090 CET	443	53462	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.575297117 CET	53461	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.575331926 CET	53462	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.575423002 CET	53461	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.575429916 CET	443	53461	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:18.575535059 CET	53462	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:18.575545073 CET	443	53462	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.301141977 CET	443	53458	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.302083969 CET	443	53459	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.309818983 CET	443	53460	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.315413952 CET	53458	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.315433025 CET	443	53458	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.316350937 CET	443	53461	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.316451073 CET	53458	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.316457987 CET	443	53458	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.316859961 CET	443	53462	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.317137003 CET	53461	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.317148924 CET	443	53461	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.317715883 CET	53461	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.317719936 CET	443	53461	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.318145990 CET	53459	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.318167925 CET	443	53459	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.318713903 CET	53459	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.318720102 CET	443	53459	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.319122076 CET	53462	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.319139957 CET	443	53462	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.319685936 CET	53462	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.319691896 CET	443	53462	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.320308924 CET	53460	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.320319891 CET	443	53460	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.321044922 CET	53460	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.321048975 CET	443	53460	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.548841953 CET	443	53458	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.548865080 CET	443	53459	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.548907042 CET	443	53460	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.548909903 CET	443	53458	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.548922062 CET	443	53459	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.548926115 CET	443	53462	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.548938036 CET	443	53461	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.548952103 CET	443	53460	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.548965931 CET	53458	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.548981905 CET	53459	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.548991919 CET	443	53462	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.549005985 CET	53460	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.549021006 CET	443	53461	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.549029112 CET	53462	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.549057007 CET	53461	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.549330950 CET	53458	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.549343109 CET	443	53458	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.551445961 CET	53462	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.551455975 CET	443	53462	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.553138018 CET	53461	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.553148031 CET	443	53461	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.554635048 CET	53459	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.554635048 CET	53459	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.554646015 CET	443	53459	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.554656029 CET	443	53459	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.556700945 CET	53460	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.556706905 CET	443	53460	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.563473940 CET	53463	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.563488960 CET	443	53463	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.563555956 CET	53463	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.564187050 CET	53464	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.564214945 CET	443	53464	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.564425945 CET	53464	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.566863060 CET	53465	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.566894054 CET	443	53465	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.567127943 CET	53465	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.568521976 CET	53466	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.568531036 CET	443	53466	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.568675995 CET	53466	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.569051981 CET	53466	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.569065094 CET	443	53466	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.569252968 CET	53463	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.569263935 CET	443	53463	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.569499016 CET	53464	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.569509983 CET	443	53464	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.570234060 CET	53467	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.570245028 CET	443	53467	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.570466042 CET	53467	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.570660114 CET	53467	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.570676088 CET	443	53467	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:19.570923090 CET	53465	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:19.570935011 CET	443	53465	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.296427011 CET	443	53463	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.296838999 CET	53463	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.296850920 CET	443	53463	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.297285080 CET	53463	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.297288895 CET	443	53463	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.300293922 CET	443	53465	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.300431967 CET	443	53466	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.300719023 CET	53465	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.300730944 CET	443	53465	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.301008940 CET	53466	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.301026106 CET	443	53466	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.301116943 CET	53465	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.301121950 CET	443	53465	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.301438093 CET	53466	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.301444054 CET	443	53466	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.314158916 CET	443	53467	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.314672947 CET	53467	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.314683914 CET	443	53467	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.315104961 CET	53467	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.315112114 CET	443	53467	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.424926043 CET	443	53463	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.424973011 CET	443	53463	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.425029993 CET	53463	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.425250053 CET	53463	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.425259113 CET	443	53463	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.425278902 CET	53463	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.425282955 CET	443	53463	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.428011894 CET	53468	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.428034067 CET	443	53468	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.428159952 CET	53468	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.428345919 CET	53468	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.428356886 CET	443	53468	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.428358078 CET	443	53466	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.428497076 CET	443	53466	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.428544998 CET	53466	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.428564072 CET	53466	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.428571939 CET	443	53466	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.428582907 CET	53466	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.428586960 CET	443	53466	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.428906918 CET	443	53465	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.429187059 CET	443	53465	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.429234982 CET	53465	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.429259062 CET	53465	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.429270983 CET	443	53465	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.431056976 CET	53469	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.431082010 CET	443	53469	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.431268930 CET	53469	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.431339979 CET	53469	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.431348085 CET	443	53469	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.431803942 CET	53470	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.431813002 CET	443	53470	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.431865931 CET	53470	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.431988001 CET	53470	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.431998014 CET	443	53470	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.445085049 CET	443	53467	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.445298910 CET	443	53467	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.445350885 CET	53467	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.445382118 CET	53467	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.445388079 CET	443	53467	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.445401907 CET	53467	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.445406914 CET	443	53467	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.447416067 CET	53471	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.447429895 CET	443	53471	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.447493076 CET	53471	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.447695017 CET	53471	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.447706938 CET	443	53471	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.804508924 CET	443	53464	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.804975986 CET	53464	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.804999113 CET	443	53464	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.805428982 CET	53464	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.805433989 CET	443	53464	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.937130928 CET	443	53464	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.937470913 CET	443	53464	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.937522888 CET	53464	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.937555075 CET	53464	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.937567949 CET	443	53464	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.937577009 CET	53464	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.937581062 CET	443	53464	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.940059900 CET	53472	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.940082073 CET	443	53472	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:20.940329075 CET	53472	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.940500021 CET	53472	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:20.940510035 CET	443	53472	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.154750109 CET	443	53468	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.155766964 CET	53468	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.155766964 CET	53468	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.155778885 CET	443	53468	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.155792952 CET	443	53468	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.169373035 CET	443	53469	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.170164108 CET	53469	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.170164108 CET	53469	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.170177937 CET	443	53469	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.170192003 CET	443	53469	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.172480106 CET	443	53470	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.172827005 CET	53470	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.172842026 CET	443	53470	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.173139095 CET	53470	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.173144102 CET	443	53470	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.192022085 CET	443	53471	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.192712069 CET	53471	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.192712069 CET	53471	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.192722082 CET	443	53471	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.192735910 CET	443	53471	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.282516956 CET	443	53468	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.282608032 CET	443	53468	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.282890081 CET	53468	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.282890081 CET	53468	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.282932043 CET	53468	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.282943010 CET	443	53468	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.285598040 CET	53473	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.285619974 CET	443	53473	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.285775900 CET	53473	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.285929918 CET	53473	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.285945892 CET	443	53473	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.298371077 CET	443	53469	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.298502922 CET	443	53469	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.298600912 CET	53469	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.298600912 CET	53469	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.298629999 CET	53469	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.298645973 CET	443	53469	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.300569057 CET	53474	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.300589085 CET	443	53474	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.300749063 CET	53474	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.300841093 CET	53474	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.300852060 CET	443	53474	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.302676916 CET	443	53470	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.302839041 CET	443	53470	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.302936077 CET	53470	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.302936077 CET	53470	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.303009033 CET	53470	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.303014040 CET	443	53470	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.304866076 CET	53475	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.304876089 CET	443	53475	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.304999113 CET	53475	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.305036068 CET	53475	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.305042982 CET	443	53475	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.324395895 CET	443	53471	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.324676991 CET	443	53471	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.324754000 CET	53471	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.324754000 CET	53471	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.324754000 CET	53471	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.326560020 CET	53476	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.326582909 CET	443	53476	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.326742887 CET	53476	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.326803923 CET	53476	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.326816082 CET	443	53476	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.400497913 CET	53477	443	192.168.2.4	142.250.186.164
Nov 6, 2024 08:54:21.400525093 CET	443	53477	142.250.186.164	192.168.2.4
Nov 6, 2024 08:54:21.400743961 CET	53477	443	192.168.2.4	142.250.186.164
Nov 6, 2024 08:54:21.400893927 CET	53477	443	192.168.2.4	142.250.186.164
Nov 6, 2024 08:54:21.400907040 CET	443	53477	142.250.186.164	192.168.2.4
Nov 6, 2024 08:54:21.542356014 CET	53471	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.542367935 CET	443	53471	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.679522038 CET	443	53472	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.679986954 CET	53472	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.679996967 CET	443	53472	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.680455923 CET	53472	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.680459976 CET	443	53472	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.812217951 CET	443	53472	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.813225985 CET	443	53472	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.813318014 CET	53472	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.813318014 CET	53472	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.813343048 CET	53472	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.813350916 CET	443	53472	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.815897942 CET	53478	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.815915108 CET	443	53478	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:21.816031933 CET	53478	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.816273928 CET	53478	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:21.816281080 CET	443	53478	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.026637077 CET	443	53473	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.027617931 CET	53473	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.027617931 CET	53473	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.027640104 CET	443	53473	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.027656078 CET	443	53473	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.034017086 CET	443	53475	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.034872055 CET	53475	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.034872055 CET	53475	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.034888983 CET	443	53475	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.034892082 CET	443	53475	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.039966106 CET	443	53474	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.040641069 CET	53474	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.040641069 CET	53474	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.040661097 CET	443	53474	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.040674925 CET	443	53474	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.077678919 CET	443	53476	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.078548908 CET	53476	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.078548908 CET	53476	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.078558922 CET	443	53476	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.078572035 CET	443	53476	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.157286882 CET	443	53473	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.157329082 CET	443	53473	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.157607079 CET	53473	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.157607079 CET	53473	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.157690048 CET	53473	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.157702923 CET	443	53473	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.160315990 CET	53479	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.160336971 CET	443	53479	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.160475016 CET	53479	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.160600901 CET	53479	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.160612106 CET	443	53479	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.162807941 CET	443	53475	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.163031101 CET	443	53475	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.163114071 CET	53475	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.163114071 CET	53475	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.163168907 CET	53475	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.163172960 CET	443	53475	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.165016890 CET	53480	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.165050030 CET	443	53480	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.165222883 CET	53480	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.165222883 CET	53480	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.165251017 CET	443	53480	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.169660091 CET	443	53474	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.169795036 CET	443	53474	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.169887066 CET	53474	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.169888020 CET	53474	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.169955015 CET	53474	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.169964075 CET	443	53474	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.171809912 CET	53481	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.171852112 CET	443	53481	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.172034025 CET	53481	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.172034025 CET	53481	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.172065020 CET	443	53481	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.207717896 CET	443	53476	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.207906961 CET	443	53476	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.208093882 CET	53476	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.208095074 CET	53476	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.208362103 CET	53476	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.208370924 CET	443	53476	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.209851980 CET	53482	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.209873915 CET	443	53482	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.209974051 CET	53482	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.210052967 CET	53482	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.210063934 CET	443	53482	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.256875038 CET	443	53477	142.250.186.164	192.168.2.4
Nov 6, 2024 08:54:22.257219076 CET	53477	443	192.168.2.4	142.250.186.164
Nov 6, 2024 08:54:22.257230043 CET	443	53477	142.250.186.164	192.168.2.4
Nov 6, 2024 08:54:22.257524014 CET	443	53477	142.250.186.164	192.168.2.4
Nov 6, 2024 08:54:22.260484934 CET	53477	443	192.168.2.4	142.250.186.164
Nov 6, 2024 08:54:22.260541916 CET	443	53477	142.250.186.164	192.168.2.4
Nov 6, 2024 08:54:22.308000088 CET	53477	443	192.168.2.4	142.250.186.164
Nov 6, 2024 08:54:22.554383993 CET	443	53478	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.554862022 CET	53478	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.554872036 CET	443	53478	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.555345058 CET	53478	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.555349112 CET	443	53478	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.686233997 CET	443	53478	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.686332941 CET	443	53478	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.686497927 CET	53478	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.686497927 CET	53478	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.686539888 CET	53478	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.686547041 CET	443	53478	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.689095020 CET	53483	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.689126015 CET	443	53483	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.689276934 CET	53483	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.689408064 CET	53483	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.689423084 CET	443	53483	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.878987074 CET	443	53479	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.879477978 CET	53479	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.879503012 CET	443	53479	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.879959106 CET	53479	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.879962921 CET	443	53479	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.927414894 CET	443	53481	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.928035021 CET	53481	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.928050041 CET	443	53481	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.928225994 CET	53481	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.928239107 CET	443	53481	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.951957941 CET	443	53482	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.952316046 CET	53482	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.952327013 CET	443	53482	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:22.952721119 CET	53482	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:22.952725887 CET	443	53482	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.005868912 CET	443	53479	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.006253004 CET	443	53479	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.006367922 CET	53479	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.006367922 CET	53479	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.006428003 CET	53479	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.006436110 CET	443	53479	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.008857965 CET	53484	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.008887053 CET	443	53484	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.009116888 CET	53484	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.009227037 CET	53484	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.009238958 CET	443	53484	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.063102007 CET	443	53481	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.063142061 CET	443	53481	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.063447952 CET	53481	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.063447952 CET	53481	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.063709974 CET	53481	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.063724995 CET	443	53481	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.066354990 CET	53485	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.066380978 CET	443	53485	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.066741943 CET	53485	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.066741943 CET	53485	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.066771984 CET	443	53485	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.082995892 CET	443	53482	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.083055973 CET	443	53482	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.083189011 CET	53482	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.083297968 CET	53482	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.083297968 CET	53482	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.083308935 CET	443	53482	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.083321095 CET	443	53482	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.085597038 CET	53486	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.085608959 CET	443	53486	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.085884094 CET	53486	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.086002111 CET	53486	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.086010933 CET	443	53486	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.155105114 CET	443	53480	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.156035900 CET	53480	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.156054020 CET	443	53480	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.156090021 CET	53480	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.156094074 CET	443	53480	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.333076000 CET	443	53480	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.334177971 CET	443	53480	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.336074114 CET	53480	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.336180925 CET	53480	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.336189032 CET	443	53480	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.336251020 CET	53480	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.336256027 CET	443	53480	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.340045929 CET	53487	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.340070963 CET	443	53487	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.341018915 CET	53487	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.341018915 CET	53487	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.341053009 CET	443	53487	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.415038109 CET	443	53483	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.416007042 CET	53483	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.416034937 CET	443	53483	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.417424917 CET	53483	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.417433023 CET	443	53483	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.544353962 CET	443	53483	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.544436932 CET	443	53483	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.544506073 CET	53483	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.544816971 CET	53483	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.544816971 CET	53483	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.544836044 CET	443	53483	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.544843912 CET	443	53483	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.548233986 CET	53488	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.548259020 CET	443	53488	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.552293062 CET	53488	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.552293062 CET	53488	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.552315950 CET	443	53488	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.729279041 CET	443	53484	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.730016947 CET	53484	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.730031013 CET	443	53484	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.732039928 CET	53484	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.732043982 CET	443	53484	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.795995951 CET	443	53485	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.798536062 CET	53485	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.798551083 CET	443	53485	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.799257040 CET	53485	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.799263000 CET	443	53485	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.815078974 CET	443	53486	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.826714039 CET	53486	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.826729059 CET	443	53486	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.827275991 CET	53486	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.827280998 CET	443	53486	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.856549978 CET	443	53484	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.856687069 CET	443	53484	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.858205080 CET	53484	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.925313950 CET	443	53485	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.925399065 CET	443	53485	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.925606012 CET	53485	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:23.952013969 CET	443	53486	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.952105999 CET	443	53486	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:23.954062939 CET	53486	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:24.081676960 CET	443	53487	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:24.136082888 CET	53487	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:24.291780949 CET	53487	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:24.291798115 CET	443	53487	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:24.291889906 CET	443	53488	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:24.298996925 CET	53487	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:24.299010038 CET	443	53487	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:24.300287962 CET	53484	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:24.300297022 CET	443	53484	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:24.300546885 CET	53488	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:24.300561905 CET	443	53488	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:24.301593065 CET	53488	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:24.301600933 CET	443	53488	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:24.343338013 CET	53485	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:24.343338013 CET	53485	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:24.343355894 CET	443	53485	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:24.343367100 CET	443	53485	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:24.345653057 CET	53486	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:24.345659971 CET	443	53486	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:24.345711946 CET	53486	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:24.345716953 CET	443	53486	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:24.368460894 CET	53489	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:24.368494034 CET	443	53489	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:24.368551016 CET	53489	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:24.371903896 CET	53490	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:24.371937990 CET	443	53490	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:24.371985912 CET	53490	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:24.373611927 CET	53491	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:24.373620987 CET	443	53491	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:24.373670101 CET	53491	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:24.374046087 CET	53489	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:24.374058008 CET	443	53489	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:24.375211000 CET	53490	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:24.375227928 CET	443	53490	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:24.375365019 CET	53491	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:24.375374079 CET	443	53491	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:24.425719976 CET	443	53487	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:24.425828934 CET	443	53487	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:24.425888062 CET	53487	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:24.426774025 CET	53487	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:24.426798105 CET	443	53487	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:24.428714037 CET	443	53488	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:24.428757906 CET	443	53488	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:24.428812027 CET	53488	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:24.430963039 CET	53488	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:24.430977106 CET	443	53488	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:24.430988073 CET	53488	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:24.430994987 CET	443	53488	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:24.445151091 CET	53492	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:24.445188999 CET	443	53492	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:24.445283890 CET	53492	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:24.446990967 CET	53493	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:24.447022915 CET	443	53493	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:24.447102070 CET	53493	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:24.447626114 CET	53492	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:24.447653055 CET	443	53492	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:24.447935104 CET	53493	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:24.447953939 CET	443	53493	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.100743055 CET	443	53490	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.101489067 CET	53490	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.101511002 CET	443	53490	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.102667093 CET	53490	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.102673054 CET	443	53490	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.106825113 CET	443	53491	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.107284069 CET	53491	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.107297897 CET	443	53491	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.107866049 CET	53491	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.107871056 CET	443	53491	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.133447886 CET	443	53489	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.134130001 CET	53489	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.134145021 CET	443	53489	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.135531902 CET	53489	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.135536909 CET	443	53489	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.173603058 CET	443	53492	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.174851894 CET	53492	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.174865007 CET	443	53492	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.175632954 CET	53492	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.175642014 CET	443	53492	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.191220045 CET	443	53493	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.191577911 CET	53493	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.191591978 CET	443	53493	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.192392111 CET	53493	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.192398071 CET	443	53493	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.228848934 CET	443	53490	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.229062080 CET	443	53490	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.229120016 CET	53490	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.229352951 CET	53490	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.229371071 CET	443	53490	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.229406118 CET	53490	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.229412079 CET	443	53490	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.234360933 CET	53494	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.234384060 CET	443	53494	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.234450102 CET	53494	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.234673023 CET	53494	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.234685898 CET	443	53494	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.235966921 CET	443	53491	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.236186028 CET	443	53491	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.236239910 CET	53491	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.236361027 CET	53491	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.236371040 CET	443	53491	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.236418009 CET	53491	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.236423016 CET	443	53491	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.241003036 CET	53495	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.241017103 CET	443	53495	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.241085052 CET	53495	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.241420031 CET	53495	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.241430044 CET	443	53495	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.264803886 CET	443	53489	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.264875889 CET	443	53489	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.265003920 CET	53489	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.265113115 CET	53489	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.265116930 CET	443	53489	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.265142918 CET	53489	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.265146017 CET	443	53489	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.270195007 CET	53496	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.270230055 CET	443	53496	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.270291090 CET	53496	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.270530939 CET	53496	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.270535946 CET	443	53496	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.302861929 CET	443	53492	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.303065062 CET	443	53492	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.303128004 CET	53492	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.303170919 CET	53492	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.303170919 CET	53492	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.303185940 CET	443	53492	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.303194046 CET	443	53492	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.305505037 CET	53497	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.305526018 CET	443	53497	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.305635929 CET	53497	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.305800915 CET	53497	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.305804968 CET	443	53497	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.322680950 CET	443	53493	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.323493004 CET	443	53493	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.323556900 CET	53493	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.323853970 CET	53493	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.323863029 CET	443	53493	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.323939085 CET	53493	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.323945045 CET	443	53493	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.326163054 CET	53498	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.326178074 CET	443	53498	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.326291084 CET	53498	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.326420069 CET	53498	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.326422930 CET	443	53498	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.964611053 CET	443	53495	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.965102911 CET	53495	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.965111017 CET	443	53495	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.965565920 CET	53495	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.965569973 CET	443	53495	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.975255966 CET	443	53494	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.975584030 CET	53494	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.975593090 CET	443	53494	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:25.975977898 CET	53494	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:25.975982904 CET	443	53494	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.236344099 CET	443	53494	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.236345053 CET	443	53495	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.236398935 CET	443	53495	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.236407042 CET	443	53494	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.236454964 CET	53495	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.236454964 CET	53494	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.236649036 CET	53495	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.236654997 CET	443	53495	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.236682892 CET	53495	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.236685991 CET	53494	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.236685991 CET	53494	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.236690044 CET	443	53495	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.236696005 CET	443	53494	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.236704111 CET	443	53494	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.239382982 CET	443	53497	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.239528894 CET	53499	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.239554882 CET	443	53499	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.239633083 CET	53499	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.239718914 CET	53500	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.239748001 CET	443	53500	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.239793062 CET	53500	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.239900112 CET	53497	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.239908934 CET	443	53497	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.240106106 CET	53499	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.240111113 CET	443	53499	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.240192890 CET	53500	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.240199089 CET	443	53500	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.240324974 CET	53497	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.240329981 CET	443	53497	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.240432978 CET	443	53496	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.240765095 CET	53496	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.240787983 CET	443	53496	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.240830898 CET	443	53498	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.241075993 CET	53498	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.241082907 CET	443	53498	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.241492033 CET	53498	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.241494894 CET	443	53498	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.241508961 CET	53496	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.241512060 CET	443	53496	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.374089956 CET	443	53497	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.374165058 CET	443	53497	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.374223948 CET	53497	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.374725103 CET	53497	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.374742031 CET	443	53497	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.374752998 CET	53497	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.374758005 CET	443	53497	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.377806902 CET	443	53498	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.378448963 CET	443	53498	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.378489971 CET	53498	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.379342079 CET	53498	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.379359007 CET	443	53498	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.379453897 CET	53498	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.379462004 CET	443	53498	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.383063078 CET	443	53496	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.383898973 CET	53501	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.383899927 CET	443	53496	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.383920908 CET	443	53501	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.383965969 CET	53496	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.383981943 CET	53501	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.384454012 CET	53496	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.384459019 CET	443	53496	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.385744095 CET	53501	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.385752916 CET	443	53501	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.389328957 CET	53502	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.389342070 CET	443	53502	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.389408112 CET	53502	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.392028093 CET	53502	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.392038107 CET	443	53502	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.392347097 CET	53503	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.392363071 CET	443	53503	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.392431974 CET	53503	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.392824888 CET	53503	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.392833948 CET	443	53503	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.964931965 CET	443	53499	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.965909004 CET	53499	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.965924025 CET	443	53499	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.967003107 CET	53499	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.967006922 CET	443	53499	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.973647118 CET	443	53500	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.974033117 CET	53500	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.974047899 CET	443	53500	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:26.974682093 CET	53500	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:26.974687099 CET	443	53500	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.092386961 CET	443	53499	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.092592001 CET	443	53499	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.092650890 CET	53499	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.093360901 CET	53499	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.093360901 CET	53499	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.093374014 CET	443	53499	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.093383074 CET	443	53499	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.098781109 CET	53504	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.098819017 CET	443	53504	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.098952055 CET	53504	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.099416018 CET	53504	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.099426985 CET	443	53504	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.103655100 CET	443	53500	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.104301929 CET	443	53500	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.104356050 CET	53500	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.104398012 CET	53500	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.104406118 CET	443	53500	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.108004093 CET	443	53502	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.108735085 CET	53502	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.108753920 CET	443	53502	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.109440088 CET	53502	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.109445095 CET	443	53502	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.110852957 CET	53505	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.110886097 CET	443	53505	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.110970020 CET	53505	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.111293077 CET	53505	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.111306906 CET	443	53505	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.121486902 CET	443	53503	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.124331951 CET	443	53501	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.133737087 CET	53503	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.133752108 CET	443	53503	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.134255886 CET	53503	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.134262085 CET	443	53503	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.142251015 CET	53501	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.142257929 CET	443	53501	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.155060053 CET	53501	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.155065060 CET	443	53501	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.235450029 CET	443	53502	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.235620022 CET	443	53502	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.235703945 CET	53502	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.254458904 CET	53502	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.254467964 CET	443	53502	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.254482031 CET	53502	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.254486084 CET	443	53502	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.260936022 CET	443	53503	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.261065960 CET	443	53503	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.261281967 CET	53503	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.261334896 CET	53503	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.261343956 CET	443	53503	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.261368036 CET	53503	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.261372089 CET	443	53503	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.262937069 CET	53506	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.262974024 CET	443	53506	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.263041973 CET	53506	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.263227940 CET	53506	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.263246059 CET	443	53506	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.264089108 CET	53507	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.264107943 CET	443	53507	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.264249086 CET	53507	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.264374971 CET	53507	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.264384985 CET	443	53507	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.281645060 CET	443	53501	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.281908989 CET	443	53501	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.281955957 CET	53501	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.281980038 CET	53501	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.281985998 CET	443	53501	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.281995058 CET	53501	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.281999111 CET	443	53501	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.283965111 CET	53508	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.283988953 CET	443	53508	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.284100056 CET	53508	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.284205914 CET	53508	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.284218073 CET	443	53508	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.834708929 CET	443	53504	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.835212946 CET	53504	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.835235119 CET	443	53504	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.835747957 CET	53504	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.835755110 CET	443	53504	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.839006901 CET	443	53505	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.839416027 CET	53505	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.839437008 CET	443	53505	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.839870930 CET	53505	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.839874983 CET	443	53505	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.962254047 CET	443	53504	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.962270975 CET	443	53504	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.962306023 CET	443	53504	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.962349892 CET	53504	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.962385893 CET	53504	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.962603092 CET	53504	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.962620974 CET	443	53504	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.962631941 CET	53504	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.962637901 CET	443	53504	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.965480089 CET	53509	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.965511084 CET	443	53509	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.965693951 CET	53509	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.965887070 CET	53509	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.965897083 CET	443	53509	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.988945007 CET	443	53505	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.989110947 CET	443	53505	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.989168882 CET	53505	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.989232063 CET	53505	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.989232063 CET	53505	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.989243031 CET	443	53505	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.989252090 CET	443	53505	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.990503073 CET	443	53507	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.990823030 CET	53507	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.990833044 CET	443	53507	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.991075993 CET	53510	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.991095066 CET	443	53510	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.991178036 CET	53510	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.991478920 CET	53507	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.991485119 CET	443	53507	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.991493940 CET	53510	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.991509914 CET	443	53510	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.992573977 CET	443	53506	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.992917061 CET	53506	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.992924929 CET	443	53506	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:27.993240118 CET	53506	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:27.993243933 CET	443	53506	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.020760059 CET	443	53508	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.021079063 CET	53508	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:28.021094084 CET	443	53508	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.021429062 CET	53508	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:28.021431923 CET	443	53508	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.120578051 CET	443	53507	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.120594978 CET	443	53507	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.120647907 CET	443	53507	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.120887995 CET	53507	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:28.120887995 CET	53507	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:28.120944977 CET	53507	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:28.120956898 CET	443	53507	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.122440100 CET	443	53506	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.122545958 CET	443	53506	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.123333931 CET	53511	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:28.123347998 CET	443	53511	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.123445034 CET	53506	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:28.123466015 CET	53511	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:28.123503923 CET	53506	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:28.123503923 CET	53506	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:28.123522043 CET	443	53506	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.123529911 CET	443	53506	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.123958111 CET	53511	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:28.123963118 CET	443	53511	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.125480890 CET	53512	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:28.125514030 CET	443	53512	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.125621080 CET	53512	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:28.125710964 CET	53512	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:28.125725985 CET	443	53512	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.152461052 CET	443	53508	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.152486086 CET	443	53508	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.152602911 CET	53508	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:28.152611017 CET	443	53508	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.152721882 CET	443	53508	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.152738094 CET	53508	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:28.152738094 CET	53508	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:28.152756929 CET	443	53508	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.152772903 CET	53508	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:28.152780056 CET	443	53508	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.152787924 CET	53508	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:28.152791023 CET	443	53508	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.154665947 CET	53513	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:28.154694080 CET	443	53513	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.154911041 CET	53513	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:28.154999018 CET	53513	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:28.155004025 CET	443	53513	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.881464005 CET	443	53511	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.882375956 CET	53511	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:28.882376909 CET	53511	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:28.882401943 CET	443	53511	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.882405996 CET	443	53511	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.882863998 CET	443	53513	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.883246899 CET	53513	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:28.883264065 CET	443	53513	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.883713961 CET	53513	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:28.883718014 CET	443	53513	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.885377884 CET	443	53509	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.885699987 CET	53509	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:28.885711908 CET	443	53509	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.885816097 CET	443	53510	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.886198997 CET	53509	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:28.886203051 CET	443	53509	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.886473894 CET	53510	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:28.886490107 CET	443	53510	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.886877060 CET	53510	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:28.886882067 CET	443	53510	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.923003912 CET	443	53512	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.923732996 CET	53512	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:28.923732996 CET	53512	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:28.923749924 CET	443	53512	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:28.923765898 CET	443	53512	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.010059118 CET	443	53511	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.010462046 CET	443	53511	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.010608912 CET	53511	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.010608912 CET	53511	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.010699987 CET	53511	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.010711908 CET	443	53511	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.012758970 CET	443	53513	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.012912035 CET	443	53510	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.012989044 CET	443	53513	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.012999058 CET	443	53510	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.013056993 CET	53513	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.013061047 CET	53510	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.013228893 CET	53513	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.013242006 CET	443	53513	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.013271093 CET	53513	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.013276100 CET	443	53513	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.013623953 CET	53510	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.013633013 CET	53514	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.013643980 CET	443	53510	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.013669014 CET	443	53514	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.013681889 CET	53510	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.013688087 CET	443	53510	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.013870001 CET	53514	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.014391899 CET	53514	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.014408112 CET	443	53514	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.015681028 CET	53515	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.015693903 CET	53516	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.015700102 CET	443	53515	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.015727043 CET	443	53516	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.015829086 CET	53515	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.015829086 CET	53516	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.015969992 CET	53515	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.015969992 CET	53516	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.015980959 CET	443	53515	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.015981913 CET	443	53516	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.016307116 CET	443	53509	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.016330957 CET	443	53509	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.016418934 CET	443	53509	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.016632080 CET	53509	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.016632080 CET	53509	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.016858101 CET	53509	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.016861916 CET	443	53509	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.018431902 CET	53517	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.018451929 CET	443	53517	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.018548965 CET	53517	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.018630981 CET	53517	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.018641949 CET	443	53517	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.052835941 CET	443	53512	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.052920103 CET	443	53512	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.052977085 CET	53512	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.053107977 CET	53512	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.053118944 CET	443	53512	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.053157091 CET	53512	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.053162098 CET	443	53512	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.055032969 CET	53518	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.055047035 CET	443	53518	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.055303097 CET	53518	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.055428028 CET	53518	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.055437088 CET	443	53518	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.745173931 CET	443	53515	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.745547056 CET	443	53517	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.745626926 CET	53515	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.745646954 CET	443	53515	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.745970011 CET	53517	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.745982885 CET	443	53517	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.746071100 CET	53515	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.746074915 CET	443	53515	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.746392965 CET	53517	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.746397972 CET	443	53517	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.754218102 CET	443	53516	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.754518986 CET	53516	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.754528999 CET	443	53516	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.754833937 CET	53516	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.754838943 CET	443	53516	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.770895004 CET	443	53514	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.771233082 CET	53514	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.771255970 CET	443	53514	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.771538973 CET	53514	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.771545887 CET	443	53514	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.785567045 CET	443	53518	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.785859108 CET	53518	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.785866976 CET	443	53518	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.786334991 CET	53518	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.786339998 CET	443	53518	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.874648094 CET	443	53517	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.874694109 CET	443	53517	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.874756098 CET	443	53515	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.874810934 CET	53517	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.874891043 CET	443	53515	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.874948978 CET	53515	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.874983072 CET	53517	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.874991894 CET	443	53517	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.875004053 CET	53517	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.875015974 CET	443	53517	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.875096083 CET	53515	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.875108957 CET	443	53515	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.875121117 CET	53515	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.875125885 CET	443	53515	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.877851009 CET	53519	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.877865076 CET	443	53519	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.877928972 CET	53520	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.877940893 CET	443	53520	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.877965927 CET	53519	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.877998114 CET	53520	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.878129959 CET	53520	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.878139973 CET	443	53520	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.878154039 CET	53519	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.878160954 CET	443	53519	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.885556936 CET	443	53516	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.885606050 CET	443	53516	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.885658979 CET	53516	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.885787010 CET	53516	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.885801077 CET	443	53516	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.885812998 CET	53516	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.885817051 CET	443	53516	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.887798071 CET	53521	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.887834072 CET	443	53521	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.887984991 CET	53521	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.888128042 CET	53521	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.888144016 CET	443	53521	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.905966043 CET	443	53514	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.906028032 CET	443	53514	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.906136990 CET	53514	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.906210899 CET	53514	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.906224966 CET	443	53514	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.906234980 CET	53514	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.906239986 CET	443	53514	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.908224106 CET	53522	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.908232927 CET	443	53522	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.908288956 CET	53522	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.908421993 CET	53522	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.908431053 CET	443	53522	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.917421103 CET	443	53518	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.917470932 CET	443	53518	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.917629957 CET	53518	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.917690039 CET	53518	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.917694092 CET	443	53518	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.917704105 CET	53518	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.917706966 CET	443	53518	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.919584990 CET	53523	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.919610023 CET	443	53523	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:29.919667959 CET	53523	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.919819117 CET	53523	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:29.919831991 CET	443	53523	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.304354906 CET	443	53522	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.304970980 CET	53522	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.304987907 CET	443	53522	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.306026936 CET	53522	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.306032896 CET	443	53522	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.307310104 CET	443	53523	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.307470083 CET	443	53519	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.307522058 CET	443	53520	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.308140039 CET	53523	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.308154106 CET	443	53523	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.309014082 CET	53523	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.309019089 CET	443	53523	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.309645891 CET	53520	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.309652090 CET	443	53520	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.310997963 CET	53520	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.311001062 CET	443	53520	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.311222076 CET	53519	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.311235905 CET	443	53519	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.311561108 CET	443	53521	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.311971903 CET	53519	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.311976910 CET	443	53519	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.312433958 CET	53521	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.312441111 CET	443	53521	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.313225031 CET	53521	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.313229084 CET	443	53521	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.430891991 CET	443	53522	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.431046963 CET	443	53522	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.431102037 CET	443	53522	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.431102991 CET	53522	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.431153059 CET	53522	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.431659937 CET	53522	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.431670904 CET	443	53522	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.431691885 CET	53522	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.431696892 CET	443	53522	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.435488939 CET	443	53523	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.435583115 CET	443	53523	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.435658932 CET	53523	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.435781956 CET	443	53520	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.435808897 CET	53524	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.435831070 CET	443	53524	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.435920954 CET	53524	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.435971975 CET	443	53520	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.436019897 CET	53520	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.436147928 CET	53523	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.436147928 CET	53523	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.436161995 CET	443	53523	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.436170101 CET	443	53523	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.438504934 CET	443	53519	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.438657045 CET	443	53519	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.438703060 CET	443	53519	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.438966036 CET	53520	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.438966990 CET	53519	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.438976049 CET	443	53520	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.438987970 CET	53520	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.438991070 CET	443	53520	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.440356016 CET	53524	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.440367937 CET	443	53524	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.440851927 CET	443	53521	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.440996885 CET	443	53521	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.441056967 CET	53521	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.441317081 CET	53521	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.441319942 CET	443	53521	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.441328049 CET	53521	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.441334009 CET	443	53521	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.444917917 CET	53525	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.444945097 CET	443	53525	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.445013046 CET	53525	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.445202112 CET	53519	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.445202112 CET	53519	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.445214033 CET	443	53519	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.445221901 CET	443	53519	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.445509911 CET	53525	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.445523024 CET	443	53525	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.450308084 CET	53526	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.450325966 CET	443	53526	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.450387955 CET	53526	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.451828003 CET	53527	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.451839924 CET	443	53527	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.452079058 CET	53527	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.453694105 CET	53528	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.453723907 CET	443	53528	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.453809977 CET	53528	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.454037905 CET	53526	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.454051971 CET	443	53526	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.454261065 CET	53527	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.454271078 CET	443	53527	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:31.454482079 CET	53528	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:31.454493046 CET	443	53528	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.166322947 CET	443	53525	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.166798115 CET	53525	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.166815996 CET	443	53525	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.167251110 CET	53525	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.167257071 CET	443	53525	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.170423031 CET	443	53524	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.170829058 CET	53524	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.170846939 CET	443	53524	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.171236038 CET	53524	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.171241999 CET	443	53524	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.182770967 CET	443	53528	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.183084011 CET	53528	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.183099985 CET	443	53528	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.183465004 CET	53528	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.183470011 CET	443	53528	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.188883066 CET	443	53526	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.189183950 CET	53526	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.189194918 CET	443	53526	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.189533949 CET	53526	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.189538002 CET	443	53526	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.219638109 CET	443	53527	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.219939947 CET	53527	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.219949007 CET	443	53527	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.220310926 CET	53527	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.220315933 CET	443	53527	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.247522116 CET	443	53477	142.250.186.164	192.168.2.4
Nov 6, 2024 08:54:32.247574091 CET	443	53477	142.250.186.164	192.168.2.4
Nov 6, 2024 08:54:32.247775078 CET	53477	443	192.168.2.4	142.250.186.164
Nov 6, 2024 08:54:32.293859005 CET	443	53525	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.294415951 CET	443	53525	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.294481039 CET	53525	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.294642925 CET	53525	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.294655085 CET	443	53525	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.297250032 CET	53529	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.297281027 CET	443	53529	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.297363043 CET	53529	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.297595024 CET	53529	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.297600031 CET	443	53529	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.302684069 CET	443	53524	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.302736044 CET	443	53524	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.302849054 CET	53524	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.303160906 CET	53524	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.303169966 CET	443	53524	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.303181887 CET	53524	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.303186893 CET	443	53524	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.308448076 CET	53530	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.308474064 CET	443	53530	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.308587074 CET	53530	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.308881044 CET	53530	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.308891058 CET	443	53530	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.311206102 CET	443	53528	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.311229944 CET	443	53528	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.311259985 CET	443	53528	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.311283112 CET	53528	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.311309099 CET	53528	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.311697006 CET	53528	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.311702967 CET	443	53528	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.311712980 CET	53528	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.311716080 CET	443	53528	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.314893007 CET	53531	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.314903975 CET	443	53531	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.315037012 CET	53531	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.315499067 CET	53531	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.315510988 CET	443	53531	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.317579985 CET	443	53526	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.317637920 CET	443	53526	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.317707062 CET	53526	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.330384016 CET	53526	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.330389977 CET	443	53526	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.330399990 CET	53526	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.330404043 CET	443	53526	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.336371899 CET	53532	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.336394072 CET	443	53532	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.336527109 CET	53532	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.336999893 CET	53532	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.337007999 CET	443	53532	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.386790037 CET	443	53527	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.388098955 CET	443	53527	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.388165951 CET	53527	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.402971983 CET	53527	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.402978897 CET	443	53527	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.409883022 CET	53533	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.409910917 CET	443	53533	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:32.410032034 CET	53533	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.410259962 CET	53533	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:32.410275936 CET	443	53533	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.251754999 CET	443	53529	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.252214909 CET	53529	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.252230883 CET	443	53529	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.252424002 CET	443	53530	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.252665997 CET	53529	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.252672911 CET	443	53529	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.252860069 CET	53530	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.252883911 CET	443	53530	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.252887011 CET	443	53532	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.252901077 CET	443	53531	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.253447056 CET	53530	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.253453016 CET	443	53530	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.253546953 CET	53532	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.253571987 CET	443	53532	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.253974915 CET	53532	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.253979921 CET	443	53532	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.254215002 CET	53531	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.254230022 CET	443	53531	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.254743099 CET	53531	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.254748106 CET	443	53531	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.375019073 CET	443	53533	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.375436068 CET	53533	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.375448942 CET	443	53533	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.375833035 CET	53533	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.375837088 CET	443	53533	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.382566929 CET	443	53530	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.382646084 CET	443	53529	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.382705927 CET	443	53529	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.382806063 CET	53529	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.382885933 CET	53529	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.382901907 CET	443	53529	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.382939100 CET	53529	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.382945061 CET	443	53529	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.383608103 CET	443	53532	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.384042978 CET	443	53532	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.384073019 CET	443	53532	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.384100914 CET	443	53530	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.384150982 CET	53532	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.384154081 CET	443	53530	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.384186983 CET	53530	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.384205103 CET	53530	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.384287119 CET	53532	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.384287119 CET	53532	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.384301901 CET	443	53532	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.384305954 CET	443	53532	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.385021925 CET	53530	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.385036945 CET	443	53530	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.385047913 CET	53530	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.385051966 CET	443	53530	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.385889053 CET	443	53531	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.385940075 CET	443	53531	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.386109114 CET	53531	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.386369944 CET	53531	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.386378050 CET	443	53531	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.386385918 CET	53531	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.386389971 CET	443	53531	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.386894941 CET	53534	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.386914968 CET	443	53534	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.387000084 CET	53534	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.387152910 CET	53534	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.387165070 CET	443	53534	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.387598991 CET	53535	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.387625933 CET	443	53535	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.387818098 CET	53535	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.387960911 CET	53535	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.387974024 CET	443	53535	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.388334990 CET	53536	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.388360023 CET	443	53536	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.388444901 CET	53536	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.388621092 CET	53536	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.388633966 CET	443	53536	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.389444113 CET	53537	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.389477968 CET	443	53537	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.389728069 CET	53537	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.389864922 CET	53537	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.389884949 CET	443	53537	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.508701086 CET	443	53533	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.508785009 CET	443	53533	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.508865118 CET	53533	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.508943081 CET	53533	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.508943081 CET	53533	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.508955002 CET	443	53533	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.508963108 CET	443	53533	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.511920929 CET	53538	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.511933088 CET	443	53538	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.512003899 CET	53538	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.512238026 CET	53538	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:33.512247086 CET	443	53538	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:33.683007956 CET	53477	443	192.168.2.4	142.250.186.164
Nov 6, 2024 08:54:33.683020115 CET	443	53477	142.250.186.164	192.168.2.4
Nov 6, 2024 08:54:34.115408897 CET	443	53534	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.116353989 CET	53534	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.116384983 CET	443	53534	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.117626905 CET	53534	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.117631912 CET	443	53534	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.126169920 CET	443	53536	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.126552105 CET	53536	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.126559973 CET	443	53536	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.127147913 CET	53536	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.127152920 CET	443	53536	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.132694960 CET	443	53537	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.133276939 CET	53537	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.133302927 CET	443	53537	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.134046078 CET	53537	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.134052038 CET	443	53537	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.153877020 CET	443	53535	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.154448986 CET	53535	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.154463053 CET	443	53535	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.155405998 CET	53535	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.155410051 CET	443	53535	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.245574951 CET	443	53534	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.245997906 CET	443	53534	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.246056080 CET	53534	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.246118069 CET	53534	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.246155977 CET	443	53534	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.246186018 CET	53534	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.246221066 CET	443	53534	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.251326084 CET	53539	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.251353979 CET	443	53539	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.251411915 CET	53539	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.251811981 CET	53539	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.251843929 CET	443	53539	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.256757975 CET	443	53536	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.256779909 CET	443	53536	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.256807089 CET	443	53536	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.256856918 CET	53536	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.257312059 CET	53536	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.257319927 CET	443	53536	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.262831926 CET	53540	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.262859106 CET	443	53540	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.262921095 CET	53540	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.263190031 CET	53540	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.263202906 CET	443	53540	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.263305902 CET	443	53537	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.263458014 CET	443	53537	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.263577938 CET	53537	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.263742924 CET	53537	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.263742924 CET	53537	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.263751984 CET	443	53537	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.263758898 CET	443	53537	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.269176960 CET	53541	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.269206047 CET	443	53541	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.269262075 CET	53541	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.269364119 CET	53541	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.269377947 CET	443	53541	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.275638103 CET	443	53538	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.276140928 CET	53538	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.276149035 CET	443	53538	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.276632071 CET	53538	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.276637077 CET	443	53538	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.301183939 CET	443	53535	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.301232100 CET	443	53535	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.301526070 CET	53535	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.301587105 CET	53535	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.301597118 CET	443	53535	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.301605940 CET	53535	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.301611900 CET	443	53535	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.304073095 CET	53542	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.304090023 CET	443	53542	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.304148912 CET	53542	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.304461002 CET	53542	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.304467916 CET	443	53542	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.410155058 CET	443	53538	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.410204887 CET	443	53538	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.410263062 CET	53538	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.410439014 CET	53538	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.410444975 CET	443	53538	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.410527945 CET	53538	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.410531998 CET	443	53538	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.414803982 CET	53543	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.414818048 CET	443	53543	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.414890051 CET	53543	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.415344954 CET	53543	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.415357113 CET	443	53543	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.995709896 CET	443	53539	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.996301889 CET	53539	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.996334076 CET	443	53539	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:34.996773005 CET	53539	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:34.996778011 CET	443	53539	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.004050016 CET	443	53541	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.004429102 CET	53541	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.004457951 CET	443	53541	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.004971027 CET	53541	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.004976988 CET	443	53541	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.006880045 CET	443	53540	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.007271051 CET	53540	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.007292986 CET	443	53540	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.007678032 CET	53540	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.007683039 CET	443	53540	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.036758900 CET	443	53542	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.037090063 CET	53542	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.037101984 CET	443	53542	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.037539005 CET	53542	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.037543058 CET	443	53542	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.129398108 CET	443	53539	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.129465103 CET	443	53539	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.129566908 CET	53539	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.130073071 CET	53539	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.130086899 CET	443	53539	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.130131006 CET	53539	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.130136967 CET	443	53539	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.134167910 CET	53544	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.134200096 CET	443	53544	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.134284019 CET	53544	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.134795904 CET	53544	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.134809971 CET	443	53544	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.136718988 CET	443	53541	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.136775970 CET	443	53541	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.136883974 CET	53541	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.137200117 CET	53541	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.137212038 CET	443	53541	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.139729977 CET	443	53540	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.139755011 CET	443	53540	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.139790058 CET	443	53540	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.139806986 CET	53540	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.139839888 CET	53540	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.140429974 CET	53540	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.140444040 CET	443	53540	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.140454054 CET	53540	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.140459061 CET	443	53540	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.143260002 CET	53545	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.143286943 CET	443	53545	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.143382072 CET	53545	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.143570900 CET	53545	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.143584967 CET	443	53545	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.145172119 CET	53546	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.145183086 CET	443	53546	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.145349979 CET	53546	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.145507097 CET	53546	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.145515919 CET	443	53546	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.153331995 CET	443	53543	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.153721094 CET	53543	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.153731108 CET	443	53543	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.154359102 CET	53543	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.154365063 CET	443	53543	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.167005062 CET	443	53542	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.167067051 CET	443	53542	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.167114019 CET	53542	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.167428970 CET	53542	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.167439938 CET	443	53542	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.167449951 CET	53542	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.167454004 CET	443	53542	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.173211098 CET	53547	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.173234940 CET	443	53547	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.173558950 CET	53547	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.173898935 CET	53547	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.173912048 CET	443	53547	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.282705069 CET	443	53543	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.282777071 CET	443	53543	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.282830000 CET	53543	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.283000946 CET	53543	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.283006907 CET	443	53543	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.283018112 CET	53543	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.283024073 CET	443	53543	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.285479069 CET	53548	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.285510063 CET	443	53548	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.285605907 CET	53548	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.285758972 CET	53548	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.285773039 CET	443	53548	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.870624065 CET	443	53545	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.871109962 CET	53545	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.871131897 CET	443	53545	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.871562958 CET	53545	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.871568918 CET	443	53545	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.873533964 CET	443	53544	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.873848915 CET	53544	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.873867989 CET	443	53544	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.874181032 CET	53544	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.874186039 CET	443	53544	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.875667095 CET	443	53546	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.876003981 CET	53546	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.876014948 CET	443	53546	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.876324892 CET	53546	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.876328945 CET	443	53546	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.898935080 CET	443	53547	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.899275064 CET	53547	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.899292946 CET	443	53547	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.899599075 CET	53547	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.899605036 CET	443	53547	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.998836040 CET	443	53545	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.998915911 CET	443	53545	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.999072075 CET	53545	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.999113083 CET	53545	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.999129057 CET	443	53545	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:35.999139071 CET	53545	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:35.999145031 CET	443	53545	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.001894951 CET	53549	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.001929045 CET	443	53549	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.002062082 CET	53549	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.002196074 CET	53549	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.002218008 CET	443	53549	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.003910065 CET	443	53544	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.003938913 CET	443	53544	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.003983974 CET	443	53544	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.003992081 CET	53544	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.004030943 CET	53544	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.004117012 CET	53544	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.004128933 CET	443	53544	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.004156113 CET	53544	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.004160881 CET	443	53544	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.005805969 CET	443	53546	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.005858898 CET	443	53546	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.005959034 CET	53546	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.006169081 CET	53550	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.006201029 CET	443	53550	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.006258965 CET	53550	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.006336927 CET	53546	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.006341934 CET	443	53546	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.006352901 CET	53546	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.006356001 CET	443	53546	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.006360054 CET	53550	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.006373882 CET	443	53550	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.008372068 CET	53551	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.008383036 CET	443	53551	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.008655071 CET	53551	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.008809090 CET	53551	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.008820057 CET	443	53551	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.026707888 CET	443	53547	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.026802063 CET	443	53547	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.026900053 CET	53547	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.026937962 CET	53547	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.026943922 CET	443	53547	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.026954889 CET	53547	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.026958942 CET	443	53547	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.027137041 CET	443	53548	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.027472973 CET	53548	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.027488947 CET	443	53548	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.027977943 CET	53548	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.027982950 CET	443	53548	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.029009104 CET	53552	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.029027939 CET	443	53552	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.029165030 CET	53552	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.029268026 CET	53552	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.029280901 CET	443	53552	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.159502983 CET	443	53548	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.159531116 CET	443	53548	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.159562111 CET	443	53548	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.159595966 CET	53548	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.159656048 CET	53548	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.159749031 CET	53548	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.159749031 CET	53548	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.159759045 CET	443	53548	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.159765959 CET	443	53548	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.161822081 CET	53553	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.161851883 CET	443	53553	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.162141085 CET	53553	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.162188053 CET	53553	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.162198067 CET	443	53553	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.732718945 CET	443	53549	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.733561039 CET	53549	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.733561993 CET	53549	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.733592033 CET	443	53549	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.733603001 CET	443	53549	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.735724926 CET	443	53550	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.736330986 CET	53550	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.736330986 CET	53550	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.736366987 CET	443	53550	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.736372948 CET	443	53550	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.747773886 CET	443	53551	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.748353958 CET	53551	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.748353958 CET	53551	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.748364925 CET	443	53551	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.748378038 CET	443	53551	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.768328905 CET	443	53552	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.769130945 CET	53552	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.769130945 CET	53552	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.769154072 CET	443	53552	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.769164085 CET	443	53552	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.863163948 CET	443	53549	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.863215923 CET	443	53549	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.863420963 CET	53549	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.863445997 CET	53549	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.863445997 CET	53549	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.863460064 CET	443	53549	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.863467932 CET	443	53549	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.866281033 CET	53554	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.866311073 CET	443	53554	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.866525888 CET	53554	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.866600037 CET	53554	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.866615057 CET	443	53554	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.879132032 CET	443	53551	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.879276991 CET	443	53551	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.879405975 CET	53551	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.879405975 CET	53551	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.879492998 CET	53551	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.879498959 CET	443	53551	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.881452084 CET	53555	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.881489992 CET	443	53555	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.881656885 CET	53555	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.881722927 CET	53555	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.881731033 CET	443	53555	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.886045933 CET	443	53553	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.886723995 CET	53553	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.886723995 CET	53553	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.886734962 CET	443	53553	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.886749029 CET	443	53553	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.893695116 CET	443	53550	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.893721104 CET	443	53550	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.893759012 CET	443	53550	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.893872976 CET	53550	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.893918991 CET	53550	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.893918991 CET	53550	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.893934011 CET	443	53550	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.893942118 CET	443	53550	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.895768881 CET	53556	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.895792007 CET	443	53556	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.895997047 CET	53556	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.896401882 CET	53556	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.896414995 CET	443	53556	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.899369955 CET	443	53552	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.899398088 CET	443	53552	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.899463892 CET	443	53552	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.899607897 CET	53552	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.899607897 CET	53552	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.899653912 CET	53552	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.899662018 CET	443	53552	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.901388884 CET	53557	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.901408911 CET	443	53557	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:36.901535988 CET	53557	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.901643038 CET	53557	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:36.901654005 CET	443	53557	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.014668941 CET	443	53553	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.014806032 CET	443	53553	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.014894009 CET	53553	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.015027046 CET	53553	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.015027046 CET	53553	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.015043974 CET	443	53553	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.015052080 CET	443	53553	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.016882896 CET	53558	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.016911030 CET	443	53558	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.018425941 CET	53558	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.018513918 CET	53558	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.018527985 CET	443	53558	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.605412960 CET	443	53554	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.606132030 CET	53554	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.606142044 CET	443	53554	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.606167078 CET	53554	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.606172085 CET	443	53554	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.620022058 CET	443	53555	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.620688915 CET	53555	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.620688915 CET	53555	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.620713949 CET	443	53555	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.620729923 CET	443	53555	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.622577906 CET	443	53556	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.622906923 CET	53556	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.622917891 CET	443	53556	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.623334885 CET	53556	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.623339891 CET	443	53556	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.628329039 CET	443	53557	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.628998995 CET	53557	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.628998995 CET	53557	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.629020929 CET	443	53557	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.629038095 CET	443	53557	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.736323118 CET	443	53554	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.736350060 CET	443	53554	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.736393929 CET	443	53554	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.736560106 CET	53554	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.736560106 CET	53554	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.736596107 CET	53554	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.736614943 CET	443	53554	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.738636017 CET	53559	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.738672018 CET	443	53559	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.738775969 CET	53559	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.738873959 CET	53559	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.738884926 CET	443	53559	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.753995895 CET	443	53556	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.754034996 CET	443	53558	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.754060030 CET	443	53556	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.754093885 CET	443	53556	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.754129887 CET	53556	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.754261017 CET	53556	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.754293919 CET	53556	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.754293919 CET	53556	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.754303932 CET	443	53556	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.754311085 CET	443	53556	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.754419088 CET	53558	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.754425049 CET	443	53558	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.755388021 CET	443	53555	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.755467892 CET	53558	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.755471945 CET	443	53558	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.756242037 CET	53560	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.756272078 CET	443	53560	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.756395102 CET	443	53555	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.756412983 CET	53560	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.756465912 CET	53555	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.756465912 CET	53555	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.756501913 CET	53560	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.756504059 CET	53555	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.756515026 CET	443	53560	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.756517887 CET	443	53555	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.758258104 CET	53561	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.758287907 CET	443	53561	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.758347034 CET	53561	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.758491039 CET	53561	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.758502007 CET	443	53561	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.760473967 CET	443	53557	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.760518074 CET	443	53557	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.760597944 CET	53557	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.760699987 CET	53557	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.760699987 CET	53557	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.760714054 CET	443	53557	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.760721922 CET	443	53557	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.762342930 CET	53562	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.762355089 CET	443	53562	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.762482882 CET	53562	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.762562037 CET	53562	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.762573957 CET	443	53562	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.888156891 CET	443	53558	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.888206005 CET	443	53558	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.888276100 CET	53558	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.888444901 CET	53558	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.888451099 CET	443	53558	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.888531923 CET	53558	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.888536930 CET	443	53558	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.890305042 CET	53563	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.890340090 CET	443	53563	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:37.890520096 CET	53563	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.890520096 CET	53563	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:37.890547037 CET	443	53563	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.483967066 CET	443	53559	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.484528065 CET	53559	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.484554052 CET	443	53559	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.485023022 CET	53559	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.485027075 CET	443	53559	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.491275072 CET	443	53560	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.491596937 CET	53560	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.491625071 CET	443	53560	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.494088888 CET	53560	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.494092941 CET	443	53560	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.495935917 CET	443	53562	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.500650883 CET	443	53561	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.501094103 CET	53562	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.501108885 CET	443	53562	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.501493931 CET	53562	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.501497984 CET	443	53562	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.501686096 CET	53561	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.501701117 CET	443	53561	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.502012968 CET	53561	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.502017021 CET	443	53561	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.619896889 CET	443	53559	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.623100042 CET	443	53559	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.625010967 CET	443	53560	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.625101089 CET	443	53560	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.625124931 CET	53559	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.625144005 CET	443	53560	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.625185966 CET	53560	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.625272036 CET	53560	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.625688076 CET	443	53562	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.625716925 CET	443	53562	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.625762939 CET	443	53562	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.625927925 CET	53562	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.630414963 CET	53559	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.630414963 CET	53559	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.630434036 CET	443	53559	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.630443096 CET	443	53559	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.630497932 CET	443	53561	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.630558968 CET	443	53561	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.630815029 CET	53561	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.631520033 CET	53561	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.631520033 CET	53561	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.631545067 CET	443	53561	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.631550074 CET	443	53561	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.631886959 CET	53560	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.631886959 CET	53560	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.631913900 CET	443	53560	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.631926060 CET	443	53560	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.633331060 CET	53562	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.633331060 CET	53562	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.633337021 CET	443	53562	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.633343935 CET	443	53562	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.634561062 CET	443	53563	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.643960953 CET	53563	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.643973112 CET	443	53563	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.644404888 CET	53563	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.644411087 CET	443	53563	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.647110939 CET	53564	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.647150993 CET	443	53564	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.647330046 CET	53564	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.647419930 CET	53564	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.647433043 CET	443	53564	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.647505045 CET	53565	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.647535086 CET	443	53565	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.647711992 CET	53565	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.650680065 CET	53566	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.650687933 CET	443	53566	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.650779009 CET	53566	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.656722069 CET	53567	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.656728983 CET	443	53567	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.656827927 CET	53565	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.656827927 CET	53567	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.656836987 CET	443	53565	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.656970024 CET	53566	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.656979084 CET	443	53566	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.659081936 CET	53567	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.659095049 CET	443	53567	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.773789883 CET	443	53563	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.773850918 CET	443	53563	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.774038076 CET	53563	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.774038076 CET	53563	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.774090052 CET	53563	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.774107933 CET	443	53563	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.775995016 CET	53568	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.776034117 CET	443	53568	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:38.776132107 CET	53568	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.776259899 CET	53568	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:38.776272058 CET	443	53568	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.376485109 CET	443	53564	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.377397060 CET	53564	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.377397060 CET	53564	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.377432108 CET	443	53564	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.377451897 CET	443	53564	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.386696100 CET	443	53566	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.387053967 CET	53566	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.387061119 CET	443	53566	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.387542963 CET	53566	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.387546062 CET	443	53566	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.426980019 CET	443	53567	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.427645922 CET	53567	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.427645922 CET	53567	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.427679062 CET	443	53567	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.427695036 CET	443	53567	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.504319906 CET	443	53564	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.504384041 CET	443	53564	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.504580975 CET	53564	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.504632950 CET	53564	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.504632950 CET	53564	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.504654884 CET	443	53564	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.504664898 CET	443	53564	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.507215023 CET	53569	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.507239103 CET	443	53569	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.507344007 CET	53569	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.507549047 CET	53569	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.507561922 CET	443	53569	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.515660048 CET	443	53566	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.515727997 CET	443	53566	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.515847921 CET	53566	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.515847921 CET	53566	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.515894890 CET	53566	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.515894890 CET	443	53568	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.515898943 CET	443	53566	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.516371012 CET	53568	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.516402960 CET	443	53568	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.516777039 CET	53568	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.516782999 CET	443	53568	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.518040895 CET	53570	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.518074989 CET	443	53570	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.518244982 CET	53570	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.518244982 CET	53570	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.518274069 CET	443	53570	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.563424110 CET	443	53567	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.563466072 CET	443	53567	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.563508987 CET	443	53567	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.563649893 CET	53567	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.563651085 CET	53567	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.563708067 CET	53567	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.563719988 CET	443	53567	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.566169024 CET	53571	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.566189051 CET	443	53571	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.566272974 CET	53571	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.566440105 CET	53571	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.566448927 CET	443	53571	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.654098988 CET	443	53568	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.654128075 CET	443	53568	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.654170036 CET	443	53568	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.654203892 CET	53568	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.654284954 CET	53568	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.654371977 CET	53568	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.654371977 CET	53568	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.654391050 CET	443	53568	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.654398918 CET	443	53568	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.656589985 CET	53572	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.656631947 CET	443	53572	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.656717062 CET	53572	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.656876087 CET	53572	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.656888962 CET	443	53572	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.720083952 CET	443	53565	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.720429897 CET	53565	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.720441103 CET	443	53565	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.720904112 CET	53565	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.720909119 CET	443	53565	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.849172115 CET	443	53565	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.849246025 CET	443	53565	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.849322081 CET	53565	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.849505901 CET	53565	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.849505901 CET	53565	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.849523067 CET	443	53565	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.849526882 CET	443	53565	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.852286100 CET	53573	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.852329969 CET	443	53573	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:39.852520943 CET	53573	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.852520943 CET	53573	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:39.852547884 CET	443	53573	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:40.236370087 CET	443	53570	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:40.237267971 CET	53570	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:40.237267971 CET	53570	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:40.237293959 CET	443	53570	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:40.237310886 CET	443	53570	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:40.251785040 CET	443	53569	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:40.252589941 CET	53569	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:40.252589941 CET	53569	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:40.252620935 CET	443	53569	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:40.252634048 CET	443	53569	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:40.304307938 CET	443	53571	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:40.304917097 CET	53571	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:40.304943085 CET	443	53571	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:40.305464029 CET	53571	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:40.305469036 CET	443	53571	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:40.365376949 CET	443	53570	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:40.365510941 CET	443	53570	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:40.365623951 CET	53570	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:40.365741014 CET	53570	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:40.365755081 CET	443	53570	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:40.365767956 CET	53570	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:40.365772963 CET	443	53570	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:40.368202925 CET	53574	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:40.368233919 CET	443	53574	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:40.368441105 CET	53574	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:40.368622065 CET	53574	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:40.368635893 CET	443	53574	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:40.384191990 CET	443	53569	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:40.384253979 CET	443	53569	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:40.384393930 CET	53569	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:40.384557962 CET	53569	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:40.384557962 CET	53569	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:40.384572029 CET	443	53569	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:40.384582043 CET	443	53569	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:40.386814117 CET	53575	443	192.168.2.4	13.107.246.45
Nov 6, 2024 08:54:40.386851072 CET	443	53575	13.107.246.45	192.168.2.4
Nov 6, 2024 08:54:40.387033939 CET	53575	443	192.168.2.4	13.107.246.45

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 6, 2024 08:53:17.171123981 CET	53	51074	1.1.1.1	192.168.2.4
Nov 6, 2024 08:53:17.172035933 CET	53	56031	1.1.1.1	192.168.2.4
Nov 6, 2024 08:53:18.417855024 CET	53	53685	1.1.1.1	192.168.2.4
Nov 6, 2024 08:53:18.707688093 CET	56425	53	192.168.2.4	1.1.1.1
Nov 6, 2024 08:53:18.708120108 CET	61714	53	192.168.2.4	1.1.1.1
Nov 6, 2024 08:53:18.716418028 CET	53	56425	1.1.1.1	192.168.2.4
Nov 6, 2024 08:53:18.717163086 CET	53	61714	1.1.1.1	192.168.2.4
Nov 6, 2024 08:53:20.309814930 CET	53	57707	1.1.1.1	192.168.2.4
Nov 6, 2024 08:53:20.334287882 CET	53	49193	1.1.1.1	192.168.2.4
Nov 6, 2024 08:53:21.325351000 CET	56666	53	192.168.2.4	1.1.1.1
Nov 6, 2024 08:53:21.325579882 CET	55520	53	192.168.2.4	1.1.1.1
Nov 6, 2024 08:53:21.332247019 CET	53	56666	1.1.1.1	192.168.2.4
Nov 6, 2024 08:53:21.332259893 CET	53	55520	1.1.1.1	192.168.2.4
Nov 6, 2024 08:53:22.228815079 CET	53	64132	1.1.1.1	192.168.2.4
Nov 6, 2024 08:53:23.187903881 CET	53	51919	1.1.1.1	192.168.2.4
Nov 6, 2024 08:53:34.346997023 CET	138	138	192.168.2.4	192.168.2.255
Nov 6, 2024 08:53:35.518939018 CET	53	65146	1.1.1.1	192.168.2.4
Nov 6, 2024 08:53:45.878447056 CET	53	55697	162.159.36.2	192.168.2.4
Nov 6, 2024 08:53:46.488400936 CET	53970	53	192.168.2.4	1.1.1.1
Nov 6, 2024 08:53:46.495901108 CET	53	53970	1.1.1.1	192.168.2.4
Nov 6, 2024 08:54:21.392862082 CET	64500	53	192.168.2.4	1.1.1.1
Nov 6, 2024 08:54:21.399503946 CET	53	64500	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 6, 2024 08:53:18.707688093 CET	192.168.2.4	1.1.1.1	0xf358	Standard query (0)	mt5-deriv-server-02.netlify.app	A (IP address)	IN (0x0001)	false
Nov 6, 2024 08:53:18.708120108 CET	192.168.2.4	1.1.1.1	0xd5da	Standard query (0)	mt5-deriv-server-02.netlify.app	65	IN (0x0001)	false
Nov 6, 2024 08:53:21.325351000 CET	192.168.2.4	1.1.1.1	0x9d72	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 6, 2024 08:53:21.325579882 CET	192.168.2.4	1.1.1.1	0x9703	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 6, 2024 08:53:46.488400936 CET	192.168.2.4	1.1.1.1	0x7263	Standard query (0)	15.164.165.52.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Nov 6, 2024 08:54:21.392862082 CET	192.168.2.4	1.1.1.1	0xc518	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 6, 2024 08:53:18.716418028 CET	1.1.1.1	192.168.2.4	0xf358	No error (0)	mt5-deriv-server-02.netlify.app		3.125.36.175	A (IP address)	IN (0x0001)	false
Nov 6, 2024 08:53:18.716418028 CET	1.1.1.1	192.168.2.4	0xf358	No error (0)	mt5-deriv-server-02.netlify.app		3.124.100.143	A (IP address)	IN (0x0001)	false
Nov 6, 2024 08:53:21.332247019 CET	1.1.1.1	192.168.2.4	0x9d72	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Nov 6, 2024 08:53:21.332259893 CET	1.1.1.1	192.168.2.4	0x9703	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 6, 2024 08:53:30.699920893 CET	1.1.1.1	192.168.2.4	0xd695	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Nov 6, 2024 08:53:30.699920893 CET	1.1.1.1	192.168.2.4	0xd695	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Nov 6, 2024 08:53:32.818749905 CET	1.1.1.1	192.168.2.4	0xca39	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 6, 2024 08:53:32.818749905 CET	1.1.1.1	192.168.2.4	0xca39	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Nov 6, 2024 08:53:44.882417917 CET	1.1.1.1	192.168.2.4	0x3c3b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 6, 2024 08:53:44.882417917 CET	1.1.1.1	192.168.2.4	0x3c3b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Nov 6, 2024 08:53:46.495901108 CET	1.1.1.1	192.168.2.4	0x7263	Name error (3)	15.164.165.52.in-addr.arpa	none	none	PTR (Pointer record)	IN (0x0001)	false
Nov 6, 2024 08:54:11.596009016 CET	1.1.1.1	192.168.2.4	0x535a	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 6, 2024 08:54:11.596009016 CET	1.1.1.1	192.168.2.4	0x535a	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 6, 2024 08:54:21.399503946 CET	1.1.1.1	192.168.2.4	0xc518	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

mt5-deriv-server-02.netlify.app

fs.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	3.125.36.175	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:53:19 UTC	674	OUT	GET / HTTP/1.1 Host: mt5-deriv-server-02.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-06 07:53:19 UTC	438	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 43042 Content-Type: text/html; charset=UTF-8 Date: Wed, 06 Nov 2024 07:53:19 GMT Etag: "f2a30f6524de9173502e0006f5e87493-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JC07DD25X8BYHHHYX6P91MC0 Connection: close
2024-11-06 07:53:19 UTC	748	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 4c 6f 67 20 69 6e 20 7c 20 44 65 72 69 76 2e 63 6f 6d 20 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4c 6f 67 20 69 6e 20 74 6f 20 79 6f 75 72 20 44 65 72 69 76 20 6f 6e 6c 69 6e 65 20 74 72 61 64 69 6e 67 20 61 63 63 6f 75 6e 74 20 61 6e 64 20 73 74 61 72 74 20 74 72 61 64 69 6e 67 20 6f 6e 20 74 68 65 20 6d 6f 73 74 20 70 6f 70 75 6c 61 72 20 66 69 6e 61 6e 63 69 61 6c 20 6d 61 72 6b 65 74 73 Data Ascii: <html><head><title>Log in \| Deriv.com </title><meta name="viewport" content="width=device-width, initial-scale=1.0"><meta name="description" content="Log in to your Deriv online trading account and start trading on the most popular financial markets
2024-11-06 07:53:19 UTC	2372	IN	Data Raw: 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 0d 0a 2f 2a 21 20 43 53 53 20 55 73 65 64 20 66 72 6f 6d 3a 20 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 64 65 72 69 76 2e 61 70 70 2f 63 73 73 2f 6f 6e 65 61 6c 6c 2d 64 65 72 69 76 2e 63 73 73 20 2a 2f 0d 0a 2e 70 72 6f 76 69 64 65 72 23 70 72 6f 76 69 64 65 72 5f 67 6f 6f 67 6c 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 77 68 69 74 65 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 67 72 65 79 2d 31 29 3b 7d 0d 0a 2e 70 72 6f 76 69 64 65 72 23 70 72 6f 76 69 64 65 72 5f 66 61 63 65 62 6f 6f 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 62 6c 75 65 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 77 68 69 74 65 29 3b 7d 0d 0a 2e Data Ascii: n:underline;}/! CSS Used from: https://static.deriv.app/css/oneall-deriv.css /.provider#provider_google{background:var(--color-white);color:var(--color-grey-1);}.provider#provider_facebook{background:var(--color-blue);color:var(--color-white);}.
2024-11-06 07:53:19 UTC	538	IN	Data Raw: 41 70 49 48 52 79 59 57 35 7a 62 47 46 30 5a 53 67 33 4d 7a 49 67 4d 54 55 79 4b 53 42 30 63 6d 46 75 63 32 78 68 64 47 55 6f 4e 44 41 67 4e 44 51 77 4b 53 42 30 63 6d 46 75 63 32 78 68 64 47 55 6f 4d 7a 41 67 4f 43 6b 67 64 48 4a 68 62 6e 4e 73 59 58 52 6c 4b 44 49 67 4d 69 6b 69 4c 7a 34 4b 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 44 78 77 59 58 52 6f 49 47 5a 70 62 47 77 39 49 69 4e 46 4e 7a 51 78 4d 7a 4d 69 49 47 51 39 49 6b 30 35 4c 6a 6b 33 4d 69 41 77 59 79 30 7a 4c 6a 63 33 49 44 41 74 4e 79 34 79 4d 6a 45 67 4d 69 34 78 4d 6a 6b 74 4f 43 34 35 4d 54 4d 67 4e 53 34 30 4f 54 5a 73 4d 79 34 7a 4d 7a 4d 67 4d 69 34 31 4f 44 4a 6a 4c 6a 63 34 4e 43 30 79 4c 6a 4d 31 4f 43 41 79 4c Data Ascii: ApIHRyYW5zbGF0ZSg3MzIgMTUyKSB0cmFuc2xhdGUoNDAgNDQwKSB0cmFuc2xhdGUoMzAgOCkgdHJhbnNsYXRlKDIgMikiLz4KICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxwYXRoIGZpbGw9IiNFNzQxMzMiIGQ9Ik05Ljk3MiAwYy0zLjc3IDAtNy4yMjEgMi4xMjktOC45MTMgNS40OTZsMy4zMzMgMi41ODJjLjc4NC0yLjM1OCAyL
2024-11-06 07:53:19 UTC	4744	IN	Data Raw: 49 43 41 67 49 44 77 76 5a 7a 34 4b 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 38 4c 32 63 2b 43 69 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 38 4c 32 63 2b 43 69 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 44 77 76 5a 7a 34 4b 49 43 41 67 49 43 41 67 49 43 41 38 4c 32 63 2b 43 69 41 67 49 43 41 38 4c 32 63 2b 43 6a 77 76 63 33 5a 6e 50 67 6f 3d 22 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 2d 78 3a 34 33 25 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 67 72 65 79 29 3b 7d 0d 0a 2e 70 72 6f 76 69 64 65 72 20 61 2e 62 75 74 74 6f 6e 23 62 75 74 74 6f 6e 5f 66 61 63 65 62 6f 6f 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 22 64 61 74 61 3a 69 Data Ascii: ICAgIDwvZz4KICAgICAgICAgICAgICAgICAgICA8L2c+CiAgICAgICAgICAgICAgICA8L2c+CiAgICAgICAgICAgIDwvZz4KICAgICAgICA8L2c+CiAgICA8L2c+Cjwvc3ZnPgo=");background-position-x:43%;color:var(--color-grey);}.provider a.button#button_facebook{background-image:url("data:i
2024-11-06 07:53:20 UTC	5930	IN	Data Raw: 72 61 6e 67 65 3a 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 30 33 30 30 2d 30 33 30 31 2c 20 55 2b 30 33 30 33 2d 30 33 30 34 2c 20 55 2b 30 33 30 38 2d 30 33 30 39 2c 20 55 2b 30 33 32 33 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 3b 7d 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 49 42 4d 20 50 6c 65 78 20 53 61 6e 73 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 Data Ascii: range:U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;}@font-face{font-family:'IBM Plex Sans';font-style:normal;font-weight:300;font-display:swap;sr
2024-11-06 07:53:20 UTC	7116	IN	Data Raw: 3a 27 55 62 75 6e 74 75 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 75 62 75 6e 74 75 2f 76 32 30 2f 34 69 43 76 36 4b 56 6a 62 4e 42 59 6c 67 6f 43 78 43 76 6a 73 47 79 4e 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 Data Ascii: :'Ubuntu';font-style:normal;font-weight:700;font-display:swap;src:url(https://fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjsGyN.woff2) format('woff2');unicode-range:U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+030
2024-11-06 07:53:20 UTC	8302	IN	Data Raw: 69 49 76 50 67 6f 67 49 43 41 67 49 43 41 67 49 44 78 77 59 58 52 6f 49 47 5a 70 62 47 77 39 49 69 4d 35 4f 54 6b 69 49 47 5a 70 62 47 77 74 63 6e 56 73 5a 54 30 69 62 6d 39 75 65 6d 56 79 62 79 49 67 5a 44 30 69 54 54 45 30 4c 6a 45 33 4e 79 41 79 4c 6a 45 78 4f 47 45 75 4e 53 34 31 49 44 41 67 4d 53 41 78 49 43 34 32 4e 44 59 75 4e 7a 59 30 62 43 30 79 4c 6a 41 30 4f 43 41 78 4c 6a 63 7a 4d 6b 45 33 4c 6a 6b 79 4e 53 41 33 4c 6a 6b 79 4e 53 41 77 49 44 41 67 4d 53 41 78 4e 53 34 7a 4d 7a 4d 67 4f 47 4d 74 4d 53 34 78 4e 54 4d 67 4d 69 34 35 4d 6a 63 74 4e 43 41 31 4c 54 63 75 4d 7a 4d 7a 49 44 56 68 4e 79 34 34 4d 79 41 33 4c 6a 67 7a 49 44 41 67 4d 43 41 78 4c 54 4d 75 4f 54 41 34 4c 54 45 75 4d 44 4d 34 62 43 30 79 4c 6a 49 32 4f 53 41 78 4c 6a 6b 79 Data Ascii: iIvPgogICAgICAgIDxwYXRoIGZpbGw9IiM5OTkiIGZpbGwtcnVsZT0ibm9uemVybyIgZD0iTTE0LjE3NyAyLjExOGEuNS41IDAgMSAxIC42NDYuNzY0bC0yLjA0OCAxLjczMkE3LjkyNSA3LjkyNSAwIDAgMSAxNS4zMzMgOGMtMS4xNTMgMi45MjctNCA1LTcuMzMzIDVhNy44MyA3LjgzIDAgMCAxLTMuOTA4LTEuMDM4bC0yLjI2OSAxLjky
2024-11-06 07:53:20 UTC	6116	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 33 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 32 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 69 74 6c 65 2d 74 65 78 74 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 2e 38 72 65 6d 3b 0d 0a 20 Data Ascii: width: 100%; text-align: center; margin-bottom: 30px; margin-top: -20px; } .title-text { margin-top: 0; margin-bottom: 0.8rem;
2024-11-06 07:53:20 UTC	7176	IN	Data Raw: 76 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 67 72 6f 75 70 22 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 77 72 61 70 70 65 72 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 65 6d 61 69 6c 22 20 69 64 3d 22 74 78 74 45 6d 61 69 6c 22 20 6e 61 6d 65 3d 22 65 6d 61 69 6c 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 65 78 61 6d 70 6c 65 40 65 6d 61 69 6c 2e 63 6f 6d 22 20 76 61 6c 75 65 3d 22 22 20 72 65 71 75 69 72 65 64 3d 22 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 61 75 74 6f 66 6f 63 75 73 3d 22 61 75 74 6f 66 6f 63 75 73 22 20 6d 61 78 6c 65 6e 67 74 68 3d 22 32 35 34 22 3e 0d 0a 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 74 78 74 45 6d 61 69 6c 22 3e 45 6d 61 69 6c 3c 2f 6c 61 62 65 6c 3e 0d 0a 3c 73 70 61 6e 20 Data Ascii: v class="input-group"><div class="input-wrapper"><input type="email" id="txtEmail" name="email" placeholder="example@email.com" value="" required="" autocomplete="off" autofocus="autofocus" maxlength="254"><label for="txtEmail">Email</label><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49745	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:53:23 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-06 07:53:24 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0790) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=169856 Date: Wed, 06 Nov 2024 07:53:23 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49748	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:53:25 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-06 07:53:25 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=169803 Date: Wed, 06 Nov 2024 07:53:25 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-06 07:53:25 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.4	53426	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:12 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:12 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:12 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Tue, 05 Nov 2024 00:45:17 GMT ETag: "0x8DCFD331E45FB54" x-ms-request-id: d6fc9ab7-901e-008f-8051-2f67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075412Z-15869dbbcc6lq2lzhC1DFWym6c00000001dg000000007232 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:12 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-06 07:54:12 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-06 07:54:12 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-06 07:54:12 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-06 07:54:12 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-06 07:54:12 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-06 07:54:12 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-06 07:54:12 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-06 07:54:12 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-06 07:54:12 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.4	53431	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:13 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:13 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:13 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 23b843a5-001e-0065-686a-2e0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075413Z-15869dbbcc6x4rp4hC1DFW3t7w00000006ug0000000023mw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:13 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.4	53429	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:13 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:13 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 2a69d0a5-301e-000c-194f-2f323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075413Z-15869dbbcc6vr5dxhC1DFWqn6400000000x000000000ekc8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:13 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	53427	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:13 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:13 UTC	538	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:13 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: be525922-801e-00a0-03ff-2c2196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075413Z-16547b76f7fknvdnhC1DFWxnys00000006cg000000007brd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-06 07:54:13 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	53430	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:13 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:13 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:13 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: d6aac9e3-501e-0064-155f-2e1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075413Z-17df447cdb59mt7dhC1DFWqpg400000002d000000000da5w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:13 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	53428	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:13 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:13 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: a31f2de1-f01e-0096-7209-2d10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075413Z-16547b76f7fr28cchC1DFWnuws00000006dg00000000bsab x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:13 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	53432	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:14 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:14 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 11e55392-b01e-003d-7e55-2ed32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075414Z-17df447cdb56mx55hC1DFWvy5w00000002gg000000000p4g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:14 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	53433	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:14 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:14 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:14 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 48bb68ea-401e-0016-35ff-2c53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075414Z-16547b76f7fmbrhqhC1DFWkds800000006f0000000002v4e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:14 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	53435	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:14 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:14 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: cd73d365-901e-00a0-1b58-2e6a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075414Z-17df447cdb5fzdpxhC1DFWdd3400000002f0000000009192 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:14 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	53434	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:14 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:14 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:14 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: c8bf6ef5-601e-00ab-06f0-2e66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075414Z-17df447cdb5bz95mhC1DFWnk7w00000002bg0000000067uv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:14 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	53436	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:14 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:14 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: e9380aa8-701e-005c-5160-2ebb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075414Z-15869dbbcc6rzfwxhC1DFWrkb000000001b000000000bstq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:14 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	53437	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:15 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:15 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 2e71ae26-601e-0097-6701-2df33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075415Z-16547b76f7f7lhvnhC1DFWa2k000000006b0000000001dd1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:15 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	53440	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:15 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:15 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: def873b9-d01e-0065-46f7-2cb77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075415Z-16547b76f7f2g4rlhC1DFWnx88000000066000000000ec65 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:15 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	53438	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:15 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:15 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 1b94f42b-e01e-000c-2959-2f8e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075415Z-15869dbbcc68l9dbhC1DFWc5xw000000013g00000000e6at x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:15 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	53441	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:15 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:15 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: e16c3d14-801e-00a3-050a-2d7cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075415Z-16547b76f7fnlcwwhC1DFWz6gw00000006k00000000007sc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:15 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	53439	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:15 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:15 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:15 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: ea0f8f90-301e-0020-7758-2e6299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075415Z-15869dbbcc6gt87nhC1DFWh9un000000069g00000000fwwt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-06 07:54:15 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	53442	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:16 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:16 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 4fd4ee51-801e-00a0-0601-2f2196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075416Z-17df447cdb5t94hvhC1DFWw97800000002rg00000000102s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:16 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	53444	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:16 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:16 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:16 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 7b5da9ca-601e-0050-1658-2e2c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075416Z-17df447cdb59mt7dhC1DFWqpg400000002gg00000000550v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:16 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	53443	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:16 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:16 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 5f65caf2-701e-006f-6f55-2eafc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075416Z-17df447cdb56j5xmhC1DFWn91800000002m00000000057sk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:16 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	53446	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:16 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:16 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: bdee48f1-701e-0053-2d03-2f3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075416Z-17df447cdb5qt2nfhC1DFWeaa000000002f0000000003r1m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:16 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	53445	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:16 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:16 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 63ea3643-901e-0015-3101-2db284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075416Z-16547b76f7fkj7j4hC1DFW0a9g000000068g00000000erkd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:16 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	53447	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:17 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:17 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 1847696f-e01e-0099-5c55-2eda8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075417Z-17df447cdb5km9skhC1DFWy2rc00000002k000000000ez7a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:17 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	53448	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:17 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:17 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 764b7f95-c01e-00a1-1c00-2d7e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075417Z-16547b76f7fj897nhC1DFWdwq4000000063000000000hk6b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:17 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	53450	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:17 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:17 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:17 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: d33e01be-001e-0082-0958-2e5880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075417Z-15869dbbcc6qwghvhC1DFWssds00000002sg0000000005gv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-06 07:54:17 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	53451	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:17 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:17 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 1e45a1cf-401e-0029-3ef1-2c9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075417Z-16547b76f7fj897nhC1DFWdwq4000000065g00000000b15n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:17 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	53452	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:17 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:17 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:17 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 2398beba-501e-007b-298e-2d5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075417Z-15869dbbcc6kg5mvhC1DFWgs2s000000010g00000000c9vv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:17 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	53453	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:18 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:18 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 3dd2fc16-001e-0028-2c0b-2fc49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075418Z-17df447cdb5vp9l9hC1DFW0nrw00000002n0000000008qcu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:18 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	53454	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:18 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:18 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 0e31b739-001e-002b-304d-2e99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075418Z-15869dbbcc6lq45jhC1DFW7zwg00000006s00000000071qc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:18 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	53456	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:18 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:18 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 4785079e-601e-0070-2a8e-2da0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075418Z-15869dbbcc6ss7fxhC1DFW86fs00000002zg00000000hkmx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:18 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	53455	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:18 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:18 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:18 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 47d81796-701e-0021-2403-2d3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075418Z-16547b76f7fj5p7mhC1DFWf8w400000006bg00000000h1zr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:18 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	53457	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:18 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:18 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 80fffc35-b01e-0002-7355-2e1b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075418Z-17df447cdb5g2j9ghC1DFWev08000000029000000000hkkv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:18 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	53458	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:19 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:19 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 65394723-101e-00a2-80f1-2c9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075419Z-16547b76f7fwvr5dhC1DFW2c94000000064g00000000hq56 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:19 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	53461	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:19 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:19 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 5d06d88c-b01e-0084-0908-2cd736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075419Z-16547b76f7ftdm8dhC1DFWs13g00000006b000000000693y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:19 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	53459	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:19 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:19 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: c6b44c52-001e-0028-1ef0-2cc49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075419Z-16547b76f7f9bs6dhC1DFWt3rg000000067g00000000fse6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:19 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	53462	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:19 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:19 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: e92242f2-701e-005c-7858-2ebb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075419Z-17df447cdb5wrr5fhC1DFWte8n00000002p0000000006xdv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:19 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	53460	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:19 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:19 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: ceff4d6f-101e-007a-10c7-2c047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075419Z-16547b76f7f8dwtrhC1DFWd1zn00000006gg000000003d3r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:19 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	53463	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:20 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:20 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 886cc861-d01e-0049-60f4-2ee7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075420Z-17df447cdb5g2j9ghC1DFWev0800000002cg000000008sxu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:20 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	53465	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:20 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:20 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a288df0b-b01e-00ab-0601-2ddafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075420Z-16547b76f7fknvdnhC1DFWxnys000000068g00000000nghs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:20 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	53466	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:20 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:20 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: a895e1ee-d01e-0028-4b5c-2e7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075420Z-17df447cdb5c9wvxhC1DFWn08n00000002s000000000024k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:20 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	53467	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:20 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:20 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: b9c7c7ae-801e-00a0-1255-2e2196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075420Z-17df447cdb5fzdpxhC1DFWdd3400000002cg00000000ff9v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:20 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	53464	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:20 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:20 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:20 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 2e6eb393-601e-0097-4b00-2df33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075420Z-16547b76f7fnlcwwhC1DFWz6gw00000006c000000000dy52 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:20 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	53468	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:21 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:21 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 1504f0f6-801e-0015-3c58-2ef97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075421Z-17df447cdb59mt7dhC1DFWqpg400000002d000000000da9n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:21 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	53469	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:21 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:21 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 32d5e889-e01e-0099-1f00-2dda8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075421Z-16547b76f7f7rtshhC1DFWrtqn000000068g00000000hptu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:21 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	53470	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:21 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:21 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 959a3585-901e-0067-5ae9-2eb5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075421Z-17df447cdb5g2j9ghC1DFWev0800000002g0000000001hzz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:21 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	53471	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:21 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:21 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:21 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: ac6bbd40-501e-007b-3e0c-2d5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075421Z-16547b76f7f76p6chC1DFWctqw00000006h00000000028cr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-06 07:54:21 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	53472	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:21 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:21 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 1511aab4-801e-0015-535c-2ef97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075421Z-15869dbbcc6x4rp4hC1DFW3t7w00000006s0000000007tvt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:21 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	53473	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:22 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:22 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: f3c8b028-b01e-003d-2400-2fd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075422Z-17df447cdb5zfhrmhC1DFWh33000000002eg00000000bbpz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:22 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	53475	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:22 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:22 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: a4ba0423-501e-0029-6446-2cd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075422Z-16547b76f7fxdzxghC1DFWmf7n00000006ag00000000kmpc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:22 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	53474	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:22 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:22 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 8dd7d181-c01e-0066-495f-2ea1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075422Z-15869dbbcc6j87jfhC1DFWky3s00000006rg000000007sdp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:22 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	53476	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:22 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:22 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 94271b33-901e-0067-284a-2eb5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075422Z-15869dbbcc6rmhmhhC1DFWd7b800000006d000000000ekny x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:22 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	53478	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:22 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:22 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: a6b44ea6-e01e-001f-1d33-2f1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075422Z-15869dbbcc6khw88hC1DFWh5f400000006rg000000008kcn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:22 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	53479	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:22 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:22 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: cd5b73c9-701e-0098-1e09-2d395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075422Z-16547b76f7fj897nhC1DFWdwq4000000066g000000008y7x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:23 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	53481	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:22 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:22 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 29e284b5-001e-0065-5703-2d0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075422Z-16547b76f7f22sh5hC1DFWyb4w000000067000000000dccy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:23 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	53482	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:22 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:23 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:23 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 57b0571f-501e-00a3-7dfb-2cc0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075423Z-16547b76f7fkj7j4hC1DFW0a9g000000067000000000geq9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:23 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	53480	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:23 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:23 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 4767900e-701e-003e-7b03-2f79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075423Z-17df447cdb56mx55hC1DFWvy5w00000002b000000000bm7y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:23 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	53483	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:23 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:23 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 75885d68-101e-005a-2958-2e882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075423Z-17df447cdb5c6d7phC1DFWuq9s00000002eg00000000eps0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:23 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	53484	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:23 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:23 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 9ba15ece-101e-0034-5d08-2c96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075423Z-16547b76f7f4k79zhC1DFWu9y000000006cg000000009r12 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:23 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	53485	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:23 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:23 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 1572e0e4-b01e-003e-1a0c-2d8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075423Z-16547b76f7f8dwtrhC1DFWd1zn00000006e00000000094t8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:23 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	53486	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:23 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:23 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 52d88e03-c01e-007a-7b0b-2db877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075423Z-16547b76f7f22sh5hC1DFWyb4w00000006a0000000004qq8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:23 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	53487	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:24 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:24 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: d55876ee-301e-0099-5603-2d6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075424Z-16547b76f7fr28cchC1DFWnuws00000006e000000000ap4s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:24 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	53488	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:24 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:24 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 2d5e3293-901e-002a-4f00-2d7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075424Z-16547b76f7fwvr5dhC1DFW2c9400000006bg00000000087d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:24 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	53490	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:25 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:25 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 8b11e52e-a01e-000d-655f-2ed1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075425Z-15869dbbcc6xpvqthC1DFW7ehg0000000320000000007dzg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:25 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	53491	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:25 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:25 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:25 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2f2a95d3-901e-00ac-5b08-2cb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075425Z-16547b76f7fp46ndhC1DFW66zg00000006ag00000000easn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:25 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	53489	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:25 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:25 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:25 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: c70a6fb1-401e-000a-3458-2e4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075425Z-17df447cdb5bz95mhC1DFWnk7w00000002d0000000003253 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:25 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	53492	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:25 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:25 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: a822020c-901e-005b-1ae1-2e2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075425Z-17df447cdb54ntx4hC1DFW2k4000000002m0000000000ny2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:25 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	53493	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:25 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:25 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 5df09d77-001e-00a2-0c15-2dd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075425Z-16547b76f7fwvr5dhC1DFW2c94000000064000000000k4hd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:25 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	53495	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:25 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:25 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 392771d5-701e-000d-1cd2-2c6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075425Z-16547b76f7f7rtshhC1DFWrtqn00000006eg000000002sb7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:26 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	53494	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:25 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:26 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 86fb44b9-501e-0078-06d2-2c06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075426Z-16547b76f7fxdzxghC1DFWmf7n00000006f000000000789n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:26 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	53497	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:26 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:26 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 44d502e9-701e-000d-5c08-2c6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075426Z-16547b76f7fwvr5dhC1DFW2c9400000006ag0000000027e5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:26 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	53498	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:26 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:26 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:26 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: a4b2601f-a01e-006f-5d5f-2e13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075426Z-15869dbbcc6m5ms4hC1DFWx02800000006t00000000067as x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-06 07:54:26 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	53496	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:26 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:26 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 540c9187-b01e-0084-6537-2fd736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075426Z-15869dbbcc6zbpm7hC1DFW73ew000000019000000000207v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:26 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	53499	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:26 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:27 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 1ec43ba4-f01e-0003-65d2-2c4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075427Z-16547b76f7fr28cchC1DFWnuws00000006eg000000007wed x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:27 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	53500	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:26 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:27 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:27 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 9ec2e68b-201e-0096-6cd2-2cace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075427Z-16547b76f7f76p6chC1DFWctqw00000006h00000000028mx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:27 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	53502	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:27 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:27 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:27 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 03c1180a-901e-007b-2b6d-2eac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075427Z-15869dbbcc6sg5zbhC1DFW5qyn00000000xg00000000d84a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-06 07:54:27 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	53503	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:27 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:27 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: c3d6966f-401e-0016-3ad8-2b53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075427Z-16547b76f7fkcrm9hC1DFWxdag00000006cg00000000eeq0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:27 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	53501	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:27 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:27 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 72e3f643-801e-007b-5dd2-2ce7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075427Z-16547b76f7fr28cchC1DFWnuws00000006h0000000002nc1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:27 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	53504	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:27 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:27 UTC	517	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:27 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: d5f81cfa-001e-0017-1dd2-2c0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075427Z-16547b76f7f7scqbhC1DFW0m5w00000006800000000042hu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:27 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	53505	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:27 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:27 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:27 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 8a5e2199-d01e-0014-3f2b-2ced58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075427Z-16547b76f7fp46ndhC1DFW66zg00000006dg000000005bps x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:27 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	53507	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:27 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:28 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:28 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 289a03c5-801e-0015-6466-2ff97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075428Z-15869dbbcc6zbpm7hC1DFW73ew000000019g0000000013pg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:28 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	53506	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:27 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:28 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:28 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 6028abc9-b01e-0002-6508-2c1b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075428Z-16547b76f7f9bs6dhC1DFWt3rg00000006dg0000000011yk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:28 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	53508	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:28 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:28 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:28 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 7b700101-601e-0050-4e5f-2e2c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075428Z-15869dbbcc6pfq2ghC1DFW0bk000000006r00000000029ax x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:28 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	53511	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:28 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:29 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:28 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 7bed9db9-501e-0035-31d4-2fc923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075428Z-17df447cdb528ltlhC1DFWnt1c00000002e000000000657b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-06 07:54:29 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	53513	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:28 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:29 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:28 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 0a7a2944-a01e-0002-6858-2e5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075428Z-17df447cdb57g7m7hC1DFW791s00000002hg000000005dv2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:29 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	53509	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:28 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:29 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:28 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 0ef5c87e-a01e-0032-285c-2e1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075428Z-17df447cdb5c9wvxhC1DFWn08n00000002h000000000hs11 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:29 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	53510	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:28 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:29 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:28 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: a089fa81-d01e-0066-1640-2eea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075428Z-15869dbbcc6tfpj2hC1DFWvt5g00000006v000000000286x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:29 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	53512	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:28 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:29 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:28 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 89e70e23-001e-0014-478e-2d5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075428Z-15869dbbcc6khw88hC1DFWh5f400000006t0000000004xn5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:29 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	53515	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:29 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:29 UTC	538	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:29 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 3caab57d-601e-005c-6cd2-2cf06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075429Z-16547b76f7f8dwtrhC1DFWd1zn00000006c000000000f2sy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:29 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	53517	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:29 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:29 UTC	517	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:29 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 70b2909d-801e-00ac-33c1-2cfd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075429Z-16547b76f7fsjlq8hC1DFWehq00000000650000000005vhq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:29 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	53516	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:29 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:29 UTC	517	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:29 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 43524f19-601e-003e-07d2-2c3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075429Z-16547b76f7f9bs6dhC1DFWt3rg000000067g00000000fst7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:29 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	53514	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:29 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:29 UTC	538	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:29 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 3caab4b0-601e-005c-26d2-2cf06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075429Z-16547b76f7fnlcwwhC1DFWz6gw00000006gg000000003uwg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:29 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	53518	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:29 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:29 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:29 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 94dca2eb-101e-0079-6355-2e5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075429Z-17df447cdb5km9skhC1DFWy2rc00000002kg00000000bvzg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:29 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	53522	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:31 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:31 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:31 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: d4890277-d01e-00ad-3c4b-2ee942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075431Z-15869dbbcc6lq45jhC1DFW7zwg00000006n000000000gkwp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:31 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	53523	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:31 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:31 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:31 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: fd9539b2-a01e-001e-4155-2e49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075431Z-17df447cdb5vp9l9hC1DFW0nrw00000002n0000000008qs6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:31 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	53520	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:31 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:31 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:31 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 00707b2d-601e-0032-7755-2eeebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075431Z-15869dbbcc662ldwhC1DFW3ytc00000001cg000000004qw7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:31 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	53519	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:31 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:31 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:31 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: f6a1aa81-001e-008d-5f60-2ed91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075431Z-15869dbbcc6pfq2ghC1DFW0bk000000006h000000000ff2b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:31 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	53521	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:31 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:31 UTC	517	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:31 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: ddaecdfb-101e-0079-21d2-2c5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075431Z-16547b76f7fmbrhqhC1DFWkds800000006fg0000000018p8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:31 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	53525	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:32 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:32 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:32 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 6a4bbae2-b01e-0053-568e-2dcdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075432Z-15869dbbcc6rmhmhhC1DFWd7b800000006g0000000005u40 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:32 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	53524	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:32 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:32 UTC	517	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:32 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 2ce7ce6f-901e-002a-1fd2-2c7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075432Z-16547b76f7fnlcwwhC1DFWz6gw00000006ag00000000kmpr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:32 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	53528	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:32 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:32 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:32 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: a6459842-d01e-0014-395c-2eed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075432Z-15869dbbcc6rzfwxhC1DFWrkb000000001dg000000006xaf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:32 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	53526	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:32 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:32 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:32 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 9eee1406-f01e-0020-6e5f-2e956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075432Z-15869dbbcc6b2ncxhC1DFW661800000001cg00000000abf2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:32 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	53527	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:32 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:32 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:32 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 0a749714-e01e-0085-6ddf-2fc311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075432Z-17df447cdb5qt2nfhC1DFWeaa000000002dg000000008d6p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:32 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	53529	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:33 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:33 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:33 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 4bf7326f-801e-00ac-6855-2efd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075433Z-15869dbbcc6sg5zbhC1DFW5qyn00000000yg00000000basz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:33 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	53530	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:33 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:33 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:33 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 46dd0ec2-d01e-008e-5058-2e387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075433Z-17df447cdb5km9skhC1DFWy2rc00000002n00000000088by x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:33 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	53532	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:33 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:33 UTC	517	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:33 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: c6a80355-b01e-0070-0e08-2c1cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075433Z-16547b76f7fnlcwwhC1DFWz6gw00000006h00000000029gu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:33 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	53531	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:33 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:33 UTC	517	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:33 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 157887d5-b01e-0084-44d2-2cd736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075433Z-16547b76f7fnm7lfhC1DFWkxt400000006b0000000001zez x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:33 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	53533	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:33 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:33 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:33 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 863b0250-a01e-0002-7c34-2f5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075433Z-15869dbbcc6tjwwhhC1DFWt1ns00000006kg0000000096cz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:33 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	53534	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:34 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:34 UTC	538	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:34 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 6c65b011-001e-000b-6024-2c15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075434Z-16547b76f7fwvr5dhC1DFW2c94000000065g00000000dxn0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:34 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	53536	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:34 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:34 UTC	517	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:34 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 4df37937-b01e-003d-35ab-2bd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075434Z-16547b76f7f67wxlhC1DFWah9w00000006bg0000000058x5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:34 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	53537	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:34 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:34 UTC	538	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:34 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 3018dd1c-101e-008d-1bd2-2c92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075434Z-16547b76f7fp6mhthC1DFWrggn00000006bg00000000fx20 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-06 07:54:34 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	53535	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:34 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:34 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:34 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: fcf0554e-001e-0046-7a53-2eda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075434Z-15869dbbcc6j87jfhC1DFWky3s00000006p000000000dqvt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:34 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	53538	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:34 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:34 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:34 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 7766441c-101e-008d-2e5c-2e92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075434Z-15869dbbcc6bdtw9hC1DFWqyfw00000001bg000000009x1z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:34 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	53539	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:34 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:35 UTC	517	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:35 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 9890a075-d01e-002b-06d2-2c25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075435Z-16547b76f7f775p5hC1DFWzdvn00000006e0000000000cwr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:35 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	53541	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:35 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:35 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:35 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: dada5429-501e-007b-0d3f-2e5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075435Z-15869dbbcc6tfpj2hC1DFWvt5g00000006pg00000000d440 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:35 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	53540	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:35 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:35 UTC	517	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:35 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 29f76c25-201e-0000-6fd2-2ca537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075435Z-16547b76f7fj897nhC1DFWdwq4000000067g000000006146 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:35 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	53542	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:35 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:35 UTC	517	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:35 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 4847cb37-401e-0016-7fd2-2c53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075435Z-16547b76f7frbg6bhC1DFWr540000000067000000000bx9u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:35 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	53543	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:35 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:35 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:35 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: bb13a884-801e-0035-7914-2f752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075435Z-17df447cdb5c6d7phC1DFWuq9s00000002pg000000000gzp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-06 07:54:35 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	53545	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:35 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:35 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:35 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 512decfe-801e-0083-3058-2ef0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075435Z-17df447cdb5zfhrmhC1DFWh33000000002k0000000002hw4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:35 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	53544	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:35 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:36 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:35 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 0b0dd1c9-501e-0016-2958-2e181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075435Z-17df447cdb5tcj54hC1DFW3yew00000002n0000000006m75 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:36 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	53546	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:35 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:36 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:35 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 9a908836-001e-0028-5a40-2ec49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075435Z-15869dbbcc6x4rp4hC1DFW3t7w00000006v0000000001gue x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:36 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	53547	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:35 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:36 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:35 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: ac2249f2-001e-0017-234a-2f0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075435Z-15869dbbcc6vr5dxhC1DFWqn6400000000zg000000009cwn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:36 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	53548	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:36 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:36 UTC	517	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:36 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 8f5c374f-101e-0046-61d2-2c91b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075436Z-16547b76f7fkj7j4hC1DFW0a9g00000006b0000000005s3c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:36 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	53549	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:36 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:36 UTC	538	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:36 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 9bdc8c39-b01e-003d-1ed2-2cd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075436Z-16547b76f7fr4g8xhC1DFW9cqc00000005n0000000001edp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:36 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	53550	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:36 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:36 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:36 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: f75e4c15-501e-0047-0155-2ece6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075436Z-17df447cdb5rrj6shC1DFW6qg400000002d0000000007y1s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:36 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	53551	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:36 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:36 UTC	517	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:36 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 71af9553-101e-00a2-14d2-2c9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075436Z-16547b76f7fj897nhC1DFWdwq4000000063000000000hks9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:36 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	53552	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:36 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:36 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:36 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: e21fa4e1-f01e-003f-655f-2ed19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075436Z-15869dbbcc6kg5mvhC1DFWgs2s000000012g000000008exf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:36 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	53553	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:36 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:37 UTC	538	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:36 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 524abde6-c01e-007a-10d2-2cb877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075436Z-16547b76f7fxsvjdhC1DFWprrs000000069g000000005pmk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:37 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	53554	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:37 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:37 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:37 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 907428a7-401e-0064-0bfb-2e54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075437Z-17df447cdb57g7m7hC1DFW791s00000002bg00000000mexf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:37 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	53555	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:37 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:37 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:37 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: cd73f999-901e-00a0-1f58-2e6a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075437Z-15869dbbcc6lq2lzhC1DFWym6c00000001eg000000004ph7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-06 07:54:37 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	53556	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:37 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:37 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:37 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: fda52046-a01e-001e-025c-2e49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075437Z-15869dbbcc662ldwhC1DFW3ytc00000001ag000000008sa0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:37 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	53557	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:37 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:37 UTC	517	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:37 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 43525779-601e-003e-2ed2-2c3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075437Z-16547b76f7fm7xw6hC1DFW5px4000000066000000000f1kd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:37 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	53558	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:37 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:37 UTC	517	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:37 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 524ac160-c01e-007a-69d2-2cb877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075437Z-16547b76f7fwvr5dhC1DFW2c94000000068g0000000077sc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:37 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	53559	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:38 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:38 UTC	517	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:38 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 95e3a472-701e-0050-58d2-2c6767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075438Z-16547b76f7fknvdnhC1DFWxnys00000006eg0000000030md x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:38 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	53560	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:38 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:38 UTC	538	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:38 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 3018e59d-101e-008d-7cd2-2c92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075438Z-16547b76f7fr28cchC1DFWnuws00000006d000000000bpn5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:38 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	53562	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:38 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:38 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:38 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 64080002-501e-005b-2755-2ed7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075438Z-15869dbbcc6lq2lzhC1DFWym6c00000001e0000000005uwn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:38 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	53561	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:38 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:38 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:38 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 2bb2b5bc-c01e-002b-295c-2e6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075438Z-17df447cdb5qkskwhC1DFWeeg400000002gg00000000cb0r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:38 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	53563	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:38 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:38 UTC	538	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:38 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 87019636-c01e-0082-15c7-2caf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075438Z-16547b76f7fnlcwwhC1DFWz6gw00000006c000000000dyf7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:38 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	53564	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:39 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:39 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:39 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: 9064f0ce-801e-008c-65e8-2e7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075439Z-17df447cdb57srlrhC1DFWwgas00000002gg00000000mq03 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:39 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	53566	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:39 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:39 UTC	517	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:39 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 149ea2ad-201e-003f-48d2-2c6d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075439Z-16547b76f7fdf69shC1DFWcpd0000000068000000000998r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:39 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	53567	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:39 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:39 UTC	517	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:39 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 9ec2f91f-201e-0096-28d2-2cace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075439Z-16547b76f7f7lhvnhC1DFWa2k0000000066000000000czn7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:39 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	53568	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:39 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:39 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:39 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: fe9a5d99-301e-0000-7e03-2feecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075439Z-17df447cdb56mx55hC1DFWvy5w00000002f0000000003q88 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:39 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	53565	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:39 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:39 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:39 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 118143e1-001e-0066-4b5f-2e561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075439Z-15869dbbcc6khw88hC1DFWh5f400000006qg00000000ap42 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:39 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	53570	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:40 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:40 UTC	538	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:40 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: 26ee9f20-901e-0048-4509-2cb800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075440Z-16547b76f7fxsvjdhC1DFWprrs000000068g0000000080ef x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:40 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	53569	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:40 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:40 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:40 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: 23896e7c-001e-0065-7e55-2e0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075440Z-17df447cdb5qt2nfhC1DFWeaa000000002c000000000b3e4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:40 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	53571	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:40 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:40 UTC	517	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:40 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: 682519bf-001e-005a-0bd2-2cc3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075440Z-16547b76f7f2g4rlhC1DFWnx88000000069g00000000546n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:40 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	53572	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:40 UTC	192	OUT	GET /rules/rule702651v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:40 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:40 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEC600CC" x-ms-request-id: 69e9d9b7-301e-0000-5a5f-2eeecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075440Z-15869dbbcc68l9dbhC1DFWc5xw0000000190000000001ezm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-06 07:54:40 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702651" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedi

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	53573	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:40 UTC	192	OUT	GET /rules/rule702650v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:40 UTC	517	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:40 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEA1B544" x-ms-request-id: be3c2b5b-f01e-0071-6dd2-2c431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075440Z-16547b76f7f7jnp2hC1DFWfc30000000069000000000krtx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:40 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 61 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702650" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedia" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	53574	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-06 07:54:41 UTC	192	OUT	GET /rules/rule703101v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-06 07:54:41 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 06 Nov 2024 07:54:41 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F93037" x-ms-request-id: 09dcf867-701e-003e-7468-2e79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241106T075441Z-15869dbbcc6gt87nhC1DFWh9un00000006a000000000e76p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-06 07:54:41 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 31 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 41 54 53 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 41 54 53 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703101" V="1" DC="SM" EN="Office.Telemetry.Event.Office.MATS.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMATS"

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 3468, Parent PID: 1596

General

Target ID:	0
Start time:	02:53:11
Start date:	06/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4176, Parent PID: 3468

General

Target ID:	1
Start time:	02:53:15
Start date:	06/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1948,i,11108705414528746962,15674714443463327163,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6344, Parent PID: 1596

General

Target ID:	3
Start time:	02:53:17
Start date:	06/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "Https://mt5-deriv-server-02.netlify.app"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Https://mt5-deriv-server-02.netlify.app

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 44

Chrome Cache Entry: 45

Chrome Cache Entry: 46

Chrome Cache Entry: 47

Chrome Cache Entry: 48

Chrome Cache Entry: 49

Chrome Cache Entry: 50

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 3468, Parent PID: 1596

General

Chronological Activities

Analysis Process: chrome.exePID: 4176, Parent PID: 3468

General

Windows Analysis Report
Https://mt5-deriv-server-02.netlify.app