Edit tour

Windows Analysis Report
https://prettylearning.com

Overview

General Information

Sample URL:	https://prettylearning.com
Analysis ID:	1559004
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected non-DNS traffic on DNS port

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3484 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3568 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2556 --field-trial-handle=2512,i,4426542172027379820,7800885087021766653,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6360 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://prettylearning.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 20 Nov 2024 02:10:28 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeexpires: Wed, 20 Nov 2024 03:10:28 GMTstrict-transport-security: max-age=15724800; preloadtiming-allow-origin: *vary: Accept-Encodingx-buildname: hoothootx-buildnumber: 1528792020x-content-type-options: nosniffx-datacenter: gce-us-east1x-hostname: fen-hoothoot-us-east1-chmcvia: 1.1 googlealt-svc: h3=":443"; ma=86400CF-Cache-Status: MISSServer: cloudflareCF-RAY: 8e54e75d09240f46-EWR

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 64559 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64460
Source: unknown	Network traffic detected: HTTP traffic on port 64513 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64581
Source: unknown	Network traffic detected: HTTP traffic on port 64536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64580
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64462
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64583
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64461
Source: unknown	Network traffic detected: HTTP traffic on port 64507 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64582
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64485 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64462 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64594 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64453
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64574
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64452
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64573
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64455
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64576
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64454
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64575
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64457
Source: unknown	Network traffic detected: HTTP traffic on port 64491 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64578
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64456
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64577
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64459
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64458
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64579
Source: unknown	Network traffic detected: HTTP traffic on port 64451 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64560 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64590
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64471
Source: unknown	Network traffic detected: HTTP traffic on port 64531 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64592
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64470
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64591
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64473
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64594
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64472
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64593
Source: unknown	Network traffic detected: HTTP traffic on port 64468 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64577 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64525 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64519 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64542 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64464
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64585
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64463
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64584
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64466
Source: unknown	Network traffic detected: HTTP traffic on port 64479 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64587
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64465
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64586
Source: unknown	Network traffic detected: HTTP traffic on port 64496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64468
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64589
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64467
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64588
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64469
Source: unknown	Network traffic detected: HTTP traffic on port 64588 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64480
Source: unknown	Network traffic detected: HTTP traffic on port 64582 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64482
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64481
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64484
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64483
Source: unknown	Network traffic detected: HTTP traffic on port 64576 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64599 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64486 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64501 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64543 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64520 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64475
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64596
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64474
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64595
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64477
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64598
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64476
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64597
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64479
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64478
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64599
Source: unknown	Network traffic detected: HTTP traffic on port 64474 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64457 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64600 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64491
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64490
Source: unknown	Network traffic detected: HTTP traffic on port 64497 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64493
Source: unknown	Network traffic detected: HTTP traffic on port 64506 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64495
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64494
Source: unknown	Network traffic detected: HTTP traffic on port 64554 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64593 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64449 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64480 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64463 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64605 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64486
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64485
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64488
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64487
Source: unknown	Network traffic detected: HTTP traffic on port 64565 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64489
Source: unknown	Network traffic detected: HTTP traffic on port 64475 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64469 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64503 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64481 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64538
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64537
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64539
Source: unknown	Network traffic detected: HTTP traffic on port 64606 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64541 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64530
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64532
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64531
Source: unknown	Network traffic detected: HTTP traffic on port 64564 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64534
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64533
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64536
Source: unknown	Network traffic detected: HTTP traffic on port 64587 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64535
Source: unknown	Network traffic detected: HTTP traffic on port 64535 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64581 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64508 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64550
Source: unknown	Network traffic detected: HTTP traffic on port 64552 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64598 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64549
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64548
Source: unknown	Network traffic detected: HTTP traffic on port 64570 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64541
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64540
Source: unknown	Network traffic detected: HTTP traffic on port 64529 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64543
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64542
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64545
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64544
Source: unknown	Network traffic detected: HTTP traffic on port 64458 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64547
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64546
Source: unknown	Network traffic detected: HTTP traffic on port 64530 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64561
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64560
Source: unknown	Network traffic detected: HTTP traffic on port 64553 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64592 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64559
Source: unknown	Network traffic detected: HTTP traffic on port 64547 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64518 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64552
Source: unknown	Network traffic detected: HTTP traffic on port 64470 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64551
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64554
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64553
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64556
Source: unknown	Network traffic detected: HTTP traffic on port 64453 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64555
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64558
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64557
Source: unknown	Network traffic detected: HTTP traffic on port 64558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64570
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64451
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64572
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64450
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64571
Source: unknown	Network traffic detected: HTTP traffic on port 64502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64575 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64487 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64449
Source: unknown	Network traffic detected: HTTP traffic on port 64569 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64563
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64562
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64565
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64564
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64446
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64567
Source: unknown	Network traffic detected: HTTP traffic on port 64586 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64445
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64566
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64448
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64569
Source: unknown	Network traffic detected: HTTP traffic on port 64601 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64447
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64568
Source: unknown	Network traffic detected: HTTP traffic on port 64580 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64574 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64465 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64597 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64545 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64516 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64459 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64602 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64568 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64499 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64556 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64504 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64591 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64539 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64447 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64482 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64505
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64504
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64507
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64506
Source: unknown	Network traffic detected: HTTP traffic on port 64607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64509
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64508
Source: unknown	Network traffic detected: HTTP traffic on port 64563 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64454 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64501
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64500
Source: unknown	Network traffic detected: HTTP traffic on port 64471 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64503
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64502
Source: unknown	Network traffic detected: HTTP traffic on port 64509 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64557 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64515 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64540 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64460 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64483 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64516
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64515
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64518
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64517
Source: unknown	Network traffic detected: HTTP traffic on port 64573 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64608 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64519
Source: unknown	Network traffic detected: HTTP traffic on port 64528 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64510
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64512
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64511
Source: unknown	Network traffic detected: HTTP traffic on port 64585 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64514
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64513
Source: unknown	Network traffic detected: HTTP traffic on port 64562 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64466 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64579 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64596 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64527
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64526
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64529
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64528
Source: unknown	Network traffic detected: HTTP traffic on port 64517 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64551 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64523 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64494 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64521
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64520
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64523
Source: unknown	Network traffic detected: HTTP traffic on port 64477 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64522
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64525
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64524
Source: unknown	Network traffic detected: HTTP traffic on port 64584 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64555 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64561 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64532 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64590 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64446 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64526 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64497
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64496
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64499
Source: unknown	Network traffic detected: HTTP traffic on port 64495 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64498
Source: unknown	Network traffic detected: HTTP traffic on port 64472 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64549 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64455 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64595 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64521 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64489 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64500 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64567 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64603 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64511 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64450 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64538 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64467 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64604 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64550 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64589 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64583 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64533 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64445 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64484 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64604
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64603
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64606
Source: unknown	Network traffic detected: HTTP traffic on port 64572 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64605
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64608
Source: unknown	Network traffic detected: HTTP traffic on port 64544 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64607
Source: unknown	Network traffic detected: HTTP traffic on port 64527 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64600
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64602
Source: unknown	Network traffic detected: HTTP traffic on port 64456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64490 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64601

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.4:64445 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:64446 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:64513 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:64530 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@16/5@6/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2556 --field-trial-handle=2512,i,4426542172027379820,7800885087021766653,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://prettylearning.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2556 --field-trial-handle=2512,i,4426542172027379820,7800885087021766653,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://prettylearning.com	0%	Avira URL Cloud	safe
https://prettylearning.com	0%	Virustotal		Browse

Source	Detection	Scanner	Label	Link
https://prettylearning.com/favicon.ico	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
prettylearning.com	104.18.24.111	true	false		unknown
www.google.com	142.250.186.132	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://prettylearning.com/	false		unknown
https://prettylearning.com/favicon.ico	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.25.111	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.132	www.google.com	United States	15169	GOOGLEUS	false
104.18.24.111	prettylearning.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1559004
Start date and time:	2024-11-20 03:09:27 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 2m 59s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://prettylearning.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@16/5@6/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.212.163, 142.250.184.206, 74.125.133.84, 34.104.35.123, 199.232.214.172, 192.229.221.95, 216.58.206.35
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, dns.msftncsi.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2204)
Category:	downloaded
Size (bytes):	5340
Entropy (8bit):	5.103216255396954
Encrypted:	false
SSDEEP:	96:N8blYBTTk8IU8h2E0OLTWHDXj8zYLpGYM76YrG0Gu98FUcjOFQm1I:N8v/U8h2aIczTYuGlU8OFQuI
MD5:	0D7F9D64845EC95CB4080D6A115A751A
SHA1:	0178AC32AB4A839E42F998EB103C530F63484639
SHA-256:	A30C589C0B8A63D3D28D69BEB2B1B76165813984B066F916C24715F637041F45
SHA-512:	14E6055F4F45D30EDF11490BDBF4EE08396C1B7C7F731BBF8A93A374A8EF5D95F1F5E69719838BB01E4365E6020383D0861D93171CA7CC59C78181971A54F546
Malicious:	false
Reputation:	low
URL:	https://prettylearning.com/
Preview:	<!doctype html><html>.<head>. <title>404 Not Found</title>. <style>. html{margin:0;padding:0;background:#fff;font-family:Arial;height:100%}. body{padding:20px;color:#3b476b;line-height:18px;height:100%}. h2{font-size:1.5em;margin-bottom:30px}. h3,label{font-size:1.33em;margin:0 0 10px 0;font-weight:200}. label:hover{cursor:pointer}. section{max-width:600px;margin:0 auto 0;padding:30px 0 30px 0;border-bottom:solid 1px #eaecf2;}. section:first-child{padding-top:0}. section:last-child{border:none}. p{margin-bottom:15px}. p:last-child{margin-bottom:0}. .c{max-height:0;overflow:hidden}. input{display:none}. input:checked+label+*{max-height:100%}. </style>.</head>.<body>. <div style="position:fixed;bottom:10px;left:10px">. <input id="dc" class="t" type="checkbox" />. <label for="dc">Details</label>. <p class="c">Hostname: fen-hoothoot-us-east1-chmc<br />Datacenter: gce-us-east1</p>. </div>. <section style="top:50%;transform:translateY(-50

Chrome Cache Entry: 42

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 2 colors
Category:	dropped
Size (bytes):	198
Entropy (8bit):	1.23143406345007
Encrypted:	false
SSDEEP:	3:2oXllvlNl/FXltlBe/h/555555555555555n:2Y1UJ555555555555555n
MD5:	C6ACEDAFF906029FC5455D9EC52C7F42
SHA1:	92CBD806CA421AA2C9FF5E1FF76BBC20913A2F81
SHA-256:	9DEB629637088856FE61DC868BF40A7D21ED942E4117659F3D6C3408F59B906B
SHA-512:	7A8D002CA6B607E38860AD4485493E109CB7D3BEF241B0E5BF2A65C2E316E6185DED8EC74E3FCBD78745AB302C6D876657ABC178EE028D1B8B9A5572F429D972
Malicious:	false
Reputation:	low
Preview:	......................(....... .......................................................................................................................................................................

Chrome Cache Entry: 43

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 2 colors
Category:	downloaded
Size (bytes):	198
Entropy (8bit):	1.23143406345007
Encrypted:	false
SSDEEP:	3:2oXllvlNl/FXltlBe/h/555555555555555n:2Y1UJ555555555555555n
MD5:	C6ACEDAFF906029FC5455D9EC52C7F42
SHA1:	92CBD806CA421AA2C9FF5E1FF76BBC20913A2F81
SHA-256:	9DEB629637088856FE61DC868BF40A7D21ED942E4117659F3D6C3408F59B906B
SHA-512:	7A8D002CA6B607E38860AD4485493E109CB7D3BEF241B0E5BF2A65C2E316E6185DED8EC74E3FCBD78745AB302C6D876657ABC178EE028D1B8B9A5572F429D972
Malicious:	false
Reputation:	low
URL:	https://prettylearning.com/favicon.ico
Preview:	......................(....... .......................................................................................................................................................................

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 20, 2024 03:10:24.698216915 CET	49675	443	192.168.2.4	173.222.162.32
Nov 20, 2024 03:10:27.462158918 CET	49735	443	192.168.2.4	104.18.24.111
Nov 20, 2024 03:10:27.462256908 CET	443	49735	104.18.24.111	192.168.2.4
Nov 20, 2024 03:10:27.462341070 CET	49735	443	192.168.2.4	104.18.24.111
Nov 20, 2024 03:10:27.462627888 CET	49736	443	192.168.2.4	104.18.24.111
Nov 20, 2024 03:10:27.462671041 CET	443	49736	104.18.24.111	192.168.2.4
Nov 20, 2024 03:10:27.462878942 CET	49736	443	192.168.2.4	104.18.24.111
Nov 20, 2024 03:10:27.463371992 CET	49735	443	192.168.2.4	104.18.24.111
Nov 20, 2024 03:10:27.463408947 CET	443	49735	104.18.24.111	192.168.2.4
Nov 20, 2024 03:10:27.463803053 CET	49736	443	192.168.2.4	104.18.24.111
Nov 20, 2024 03:10:27.463840961 CET	443	49736	104.18.24.111	192.168.2.4
Nov 20, 2024 03:10:27.932138920 CET	443	49736	104.18.24.111	192.168.2.4
Nov 20, 2024 03:10:27.932476997 CET	49736	443	192.168.2.4	104.18.24.111
Nov 20, 2024 03:10:27.932540894 CET	443	49736	104.18.24.111	192.168.2.4
Nov 20, 2024 03:10:27.933463097 CET	443	49735	104.18.24.111	192.168.2.4
Nov 20, 2024 03:10:27.933695078 CET	49735	443	192.168.2.4	104.18.24.111
Nov 20, 2024 03:10:27.933763981 CET	443	49735	104.18.24.111	192.168.2.4
Nov 20, 2024 03:10:27.933993101 CET	443	49736	104.18.24.111	192.168.2.4
Nov 20, 2024 03:10:27.934071064 CET	49736	443	192.168.2.4	104.18.24.111
Nov 20, 2024 03:10:27.935518026 CET	49736	443	192.168.2.4	104.18.24.111
Nov 20, 2024 03:10:27.935611010 CET	443	49736	104.18.24.111	192.168.2.4
Nov 20, 2024 03:10:27.935961008 CET	49736	443	192.168.2.4	104.18.24.111
Nov 20, 2024 03:10:27.935976982 CET	443	49736	104.18.24.111	192.168.2.4
Nov 20, 2024 03:10:27.937340021 CET	443	49735	104.18.24.111	192.168.2.4
Nov 20, 2024 03:10:27.937427998 CET	49735	443	192.168.2.4	104.18.24.111
Nov 20, 2024 03:10:27.937963009 CET	49735	443	192.168.2.4	104.18.24.111
Nov 20, 2024 03:10:27.938158989 CET	443	49735	104.18.24.111	192.168.2.4
Nov 20, 2024 03:10:28.010792971 CET	49735	443	192.168.2.4	104.18.24.111
Nov 20, 2024 03:10:28.010818958 CET	443	49735	104.18.24.111	192.168.2.4
Nov 20, 2024 03:10:28.060252905 CET	49736	443	192.168.2.4	104.18.24.111
Nov 20, 2024 03:10:28.099054098 CET	443	49736	104.18.24.111	192.168.2.4
Nov 20, 2024 03:10:28.099112988 CET	443	49736	104.18.24.111	192.168.2.4
Nov 20, 2024 03:10:28.099174976 CET	443	49736	104.18.24.111	192.168.2.4
Nov 20, 2024 03:10:28.099212885 CET	443	49736	104.18.24.111	192.168.2.4
Nov 20, 2024 03:10:28.099227905 CET	49736	443	192.168.2.4	104.18.24.111
Nov 20, 2024 03:10:28.099240065 CET	443	49736	104.18.24.111	192.168.2.4
Nov 20, 2024 03:10:28.099277020 CET	49736	443	192.168.2.4	104.18.24.111
Nov 20, 2024 03:10:28.099371910 CET	443	49736	104.18.24.111	192.168.2.4
Nov 20, 2024 03:10:28.099446058 CET	49736	443	192.168.2.4	104.18.24.111
Nov 20, 2024 03:10:28.100871086 CET	49736	443	192.168.2.4	104.18.24.111
Nov 20, 2024 03:10:28.100888968 CET	443	49736	104.18.24.111	192.168.2.4
Nov 20, 2024 03:10:28.194503069 CET	49735	443	192.168.2.4	104.18.24.111
Nov 20, 2024 03:10:28.235372066 CET	443	49735	104.18.24.111	192.168.2.4
Nov 20, 2024 03:10:28.365417957 CET	443	49735	104.18.24.111	192.168.2.4
Nov 20, 2024 03:10:28.365498066 CET	443	49735	104.18.24.111	192.168.2.4
Nov 20, 2024 03:10:28.365595102 CET	49735	443	192.168.2.4	104.18.24.111
Nov 20, 2024 03:10:28.368200064 CET	49735	443	192.168.2.4	104.18.24.111
Nov 20, 2024 03:10:28.368235111 CET	443	49735	104.18.24.111	192.168.2.4
Nov 20, 2024 03:10:28.394129038 CET	49738	443	192.168.2.4	104.18.25.111
Nov 20, 2024 03:10:28.394175053 CET	443	49738	104.18.25.111	192.168.2.4
Nov 20, 2024 03:10:28.394256115 CET	49738	443	192.168.2.4	104.18.25.111
Nov 20, 2024 03:10:28.394517899 CET	49738	443	192.168.2.4	104.18.25.111
Nov 20, 2024 03:10:28.394535065 CET	443	49738	104.18.25.111	192.168.2.4
Nov 20, 2024 03:10:28.861016035 CET	443	49738	104.18.25.111	192.168.2.4
Nov 20, 2024 03:10:28.869476080 CET	49738	443	192.168.2.4	104.18.25.111
Nov 20, 2024 03:10:28.869507074 CET	443	49738	104.18.25.111	192.168.2.4
Nov 20, 2024 03:10:28.870531082 CET	443	49738	104.18.25.111	192.168.2.4
Nov 20, 2024 03:10:28.870611906 CET	49738	443	192.168.2.4	104.18.25.111
Nov 20, 2024 03:10:28.876426935 CET	49738	443	192.168.2.4	104.18.25.111
Nov 20, 2024 03:10:28.876509905 CET	443	49738	104.18.25.111	192.168.2.4
Nov 20, 2024 03:10:28.876632929 CET	49738	443	192.168.2.4	104.18.25.111
Nov 20, 2024 03:10:28.876646042 CET	443	49738	104.18.25.111	192.168.2.4
Nov 20, 2024 03:10:28.931298018 CET	49738	443	192.168.2.4	104.18.25.111
Nov 20, 2024 03:10:29.014970064 CET	443	49738	104.18.25.111	192.168.2.4
Nov 20, 2024 03:10:29.015042067 CET	443	49738	104.18.25.111	192.168.2.4
Nov 20, 2024 03:10:29.015116930 CET	49738	443	192.168.2.4	104.18.25.111
Nov 20, 2024 03:10:29.029580116 CET	49738	443	192.168.2.4	104.18.25.111
Nov 20, 2024 03:10:29.029608011 CET	443	49738	104.18.25.111	192.168.2.4
Nov 20, 2024 03:10:30.424743891 CET	49742	443	192.168.2.4	142.250.186.132
Nov 20, 2024 03:10:30.424783945 CET	443	49742	142.250.186.132	192.168.2.4
Nov 20, 2024 03:10:30.424840927 CET	49742	443	192.168.2.4	142.250.186.132
Nov 20, 2024 03:10:30.425092936 CET	49742	443	192.168.2.4	142.250.186.132
Nov 20, 2024 03:10:30.425102949 CET	443	49742	142.250.186.132	192.168.2.4
Nov 20, 2024 03:10:31.057405949 CET	443	49742	142.250.186.132	192.168.2.4
Nov 20, 2024 03:10:31.057840109 CET	49742	443	192.168.2.4	142.250.186.132
Nov 20, 2024 03:10:31.057852983 CET	443	49742	142.250.186.132	192.168.2.4
Nov 20, 2024 03:10:31.058816910 CET	443	49742	142.250.186.132	192.168.2.4
Nov 20, 2024 03:10:31.058986902 CET	49742	443	192.168.2.4	142.250.186.132
Nov 20, 2024 03:10:31.060902119 CET	49742	443	192.168.2.4	142.250.186.132
Nov 20, 2024 03:10:31.060954094 CET	443	49742	142.250.186.132	192.168.2.4
Nov 20, 2024 03:10:31.103159904 CET	49742	443	192.168.2.4	142.250.186.132
Nov 20, 2024 03:10:31.103168011 CET	443	49742	142.250.186.132	192.168.2.4
Nov 20, 2024 03:10:31.150141954 CET	49742	443	192.168.2.4	142.250.186.132
Nov 20, 2024 03:10:31.373097897 CET	49743	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:10:31.373136997 CET	443	49743	184.28.90.27	192.168.2.4
Nov 20, 2024 03:10:31.373228073 CET	49743	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:10:31.375001907 CET	49743	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:10:31.375015020 CET	443	49743	184.28.90.27	192.168.2.4
Nov 20, 2024 03:10:32.086879015 CET	443	49743	184.28.90.27	192.168.2.4
Nov 20, 2024 03:10:32.086955070 CET	49743	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:10:32.091344118 CET	49743	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:10:32.091352940 CET	443	49743	184.28.90.27	192.168.2.4
Nov 20, 2024 03:10:32.091576099 CET	443	49743	184.28.90.27	192.168.2.4
Nov 20, 2024 03:10:32.133626938 CET	49743	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:10:32.141099930 CET	49743	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:10:32.187331915 CET	443	49743	184.28.90.27	192.168.2.4
Nov 20, 2024 03:10:32.415941000 CET	443	49743	184.28.90.27	192.168.2.4
Nov 20, 2024 03:10:32.415992022 CET	443	49743	184.28.90.27	192.168.2.4
Nov 20, 2024 03:10:32.416038990 CET	49743	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:10:32.416990995 CET	49743	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:10:32.417005062 CET	443	49743	184.28.90.27	192.168.2.4
Nov 20, 2024 03:10:32.417015076 CET	49743	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:10:32.417020082 CET	443	49743	184.28.90.27	192.168.2.4
Nov 20, 2024 03:10:32.467447996 CET	49744	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:10:32.467493057 CET	443	49744	184.28.90.27	192.168.2.4
Nov 20, 2024 03:10:32.467559099 CET	49744	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:10:32.467829943 CET	49744	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:10:32.467847109 CET	443	49744	184.28.90.27	192.168.2.4
Nov 20, 2024 03:10:33.154966116 CET	443	49744	184.28.90.27	192.168.2.4
Nov 20, 2024 03:10:33.155077934 CET	49744	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:10:33.156624079 CET	49744	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:10:33.156641006 CET	443	49744	184.28.90.27	192.168.2.4
Nov 20, 2024 03:10:33.156840086 CET	443	49744	184.28.90.27	192.168.2.4
Nov 20, 2024 03:10:33.158209085 CET	49744	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:10:33.199373960 CET	443	49744	184.28.90.27	192.168.2.4
Nov 20, 2024 03:10:33.484735966 CET	443	49744	184.28.90.27	192.168.2.4
Nov 20, 2024 03:10:33.484889030 CET	443	49744	184.28.90.27	192.168.2.4
Nov 20, 2024 03:10:33.485743046 CET	49744	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:10:33.485743046 CET	49744	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:10:33.485907078 CET	49744	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:10:33.485928059 CET	443	49744	184.28.90.27	192.168.2.4
Nov 20, 2024 03:10:37.866667986 CET	49745	443	192.168.2.4	52.149.20.212
Nov 20, 2024 03:10:37.866718054 CET	443	49745	52.149.20.212	192.168.2.4
Nov 20, 2024 03:10:37.867218018 CET	49745	443	192.168.2.4	52.149.20.212
Nov 20, 2024 03:10:37.869178057 CET	49745	443	192.168.2.4	52.149.20.212
Nov 20, 2024 03:10:37.869194984 CET	443	49745	52.149.20.212	192.168.2.4
Nov 20, 2024 03:10:38.682826042 CET	443	49745	52.149.20.212	192.168.2.4
Nov 20, 2024 03:10:38.683170080 CET	49745	443	192.168.2.4	52.149.20.212
Nov 20, 2024 03:10:38.686117887 CET	49745	443	192.168.2.4	52.149.20.212
Nov 20, 2024 03:10:38.686135054 CET	443	49745	52.149.20.212	192.168.2.4
Nov 20, 2024 03:10:38.686527014 CET	443	49745	52.149.20.212	192.168.2.4
Nov 20, 2024 03:10:38.728244066 CET	49745	443	192.168.2.4	52.149.20.212
Nov 20, 2024 03:10:39.234170914 CET	49745	443	192.168.2.4	52.149.20.212
Nov 20, 2024 03:10:39.275360107 CET	443	49745	52.149.20.212	192.168.2.4
Nov 20, 2024 03:10:39.495779037 CET	443	49745	52.149.20.212	192.168.2.4
Nov 20, 2024 03:10:39.495834112 CET	443	49745	52.149.20.212	192.168.2.4
Nov 20, 2024 03:10:39.495853901 CET	443	49745	52.149.20.212	192.168.2.4
Nov 20, 2024 03:10:39.495891094 CET	443	49745	52.149.20.212	192.168.2.4
Nov 20, 2024 03:10:39.495894909 CET	49745	443	192.168.2.4	52.149.20.212
Nov 20, 2024 03:10:39.495922089 CET	443	49745	52.149.20.212	192.168.2.4
Nov 20, 2024 03:10:39.495938063 CET	443	49745	52.149.20.212	192.168.2.4
Nov 20, 2024 03:10:39.495950937 CET	49745	443	192.168.2.4	52.149.20.212
Nov 20, 2024 03:10:39.495968103 CET	49745	443	192.168.2.4	52.149.20.212
Nov 20, 2024 03:10:39.495985031 CET	49745	443	192.168.2.4	52.149.20.212
Nov 20, 2024 03:10:39.496036053 CET	443	49745	52.149.20.212	192.168.2.4
Nov 20, 2024 03:10:39.496093035 CET	49745	443	192.168.2.4	52.149.20.212
Nov 20, 2024 03:10:39.496105909 CET	443	49745	52.149.20.212	192.168.2.4
Nov 20, 2024 03:10:39.496494055 CET	443	49745	52.149.20.212	192.168.2.4
Nov 20, 2024 03:10:39.496545076 CET	49745	443	192.168.2.4	52.149.20.212
Nov 20, 2024 03:10:39.725157976 CET	49723	80	192.168.2.4	199.232.210.172
Nov 20, 2024 03:10:39.730449915 CET	80	49723	199.232.210.172	192.168.2.4
Nov 20, 2024 03:10:39.730567932 CET	49723	80	192.168.2.4	199.232.210.172
Nov 20, 2024 03:10:40.008524895 CET	49745	443	192.168.2.4	52.149.20.212
Nov 20, 2024 03:10:40.008553028 CET	443	49745	52.149.20.212	192.168.2.4
Nov 20, 2024 03:10:40.008567095 CET	49745	443	192.168.2.4	52.149.20.212
Nov 20, 2024 03:10:40.008573055 CET	443	49745	52.149.20.212	192.168.2.4
Nov 20, 2024 03:10:41.009494066 CET	443	49742	142.250.186.132	192.168.2.4
Nov 20, 2024 03:10:41.009557009 CET	443	49742	142.250.186.132	192.168.2.4
Nov 20, 2024 03:10:41.009839058 CET	49742	443	192.168.2.4	142.250.186.132
Nov 20, 2024 03:10:41.266907930 CET	64444	53	192.168.2.4	1.1.1.1
Nov 20, 2024 03:10:41.271774054 CET	53	64444	1.1.1.1	192.168.2.4
Nov 20, 2024 03:10:41.271859884 CET	64444	53	192.168.2.4	1.1.1.1
Nov 20, 2024 03:10:41.276773930 CET	53	64444	1.1.1.1	192.168.2.4
Nov 20, 2024 03:10:41.790627956 CET	64444	53	192.168.2.4	1.1.1.1
Nov 20, 2024 03:10:41.795659065 CET	53	64444	1.1.1.1	192.168.2.4
Nov 20, 2024 03:10:41.795717955 CET	64444	53	192.168.2.4	1.1.1.1
Nov 20, 2024 03:10:42.901927948 CET	49742	443	192.168.2.4	142.250.186.132
Nov 20, 2024 03:10:42.901957035 CET	443	49742	142.250.186.132	192.168.2.4
Nov 20, 2024 03:11:17.938708067 CET	64445	443	192.168.2.4	52.149.20.212
Nov 20, 2024 03:11:17.938769102 CET	443	64445	52.149.20.212	192.168.2.4
Nov 20, 2024 03:11:17.938851118 CET	64445	443	192.168.2.4	52.149.20.212
Nov 20, 2024 03:11:17.939192057 CET	64445	443	192.168.2.4	52.149.20.212
Nov 20, 2024 03:11:17.939210892 CET	443	64445	52.149.20.212	192.168.2.4
Nov 20, 2024 03:11:18.243822098 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:18.243899107 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:18.244014978 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:18.244294882 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:18.244340897 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:18.727718115 CET	443	64445	52.149.20.212	192.168.2.4
Nov 20, 2024 03:11:18.728039026 CET	64445	443	192.168.2.4	52.149.20.212
Nov 20, 2024 03:11:18.733129978 CET	64445	443	192.168.2.4	52.149.20.212
Nov 20, 2024 03:11:18.733145952 CET	443	64445	52.149.20.212	192.168.2.4
Nov 20, 2024 03:11:18.733664036 CET	443	64445	52.149.20.212	192.168.2.4
Nov 20, 2024 03:11:18.745484114 CET	64445	443	192.168.2.4	52.149.20.212
Nov 20, 2024 03:11:18.791328907 CET	443	64445	52.149.20.212	192.168.2.4
Nov 20, 2024 03:11:18.922678947 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:18.922780037 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:18.925180912 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:18.925205946 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:18.925573111 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:18.938220024 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:18.979371071 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.043200970 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.043250084 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.043292046 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.043344975 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.043375969 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.043397903 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.043461084 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.062899113 CET	443	64445	52.149.20.212	192.168.2.4
Nov 20, 2024 03:11:19.062930107 CET	443	64445	52.149.20.212	192.168.2.4
Nov 20, 2024 03:11:19.062952042 CET	443	64445	52.149.20.212	192.168.2.4
Nov 20, 2024 03:11:19.063071966 CET	64445	443	192.168.2.4	52.149.20.212
Nov 20, 2024 03:11:19.063091993 CET	443	64445	52.149.20.212	192.168.2.4
Nov 20, 2024 03:11:19.063150883 CET	64445	443	192.168.2.4	52.149.20.212
Nov 20, 2024 03:11:19.064188004 CET	443	64445	52.149.20.212	192.168.2.4
Nov 20, 2024 03:11:19.064258099 CET	64445	443	192.168.2.4	52.149.20.212
Nov 20, 2024 03:11:19.064269066 CET	443	64445	52.149.20.212	192.168.2.4
Nov 20, 2024 03:11:19.064306974 CET	443	64445	52.149.20.212	192.168.2.4
Nov 20, 2024 03:11:19.064340115 CET	64445	443	192.168.2.4	52.149.20.212
Nov 20, 2024 03:11:19.064434052 CET	443	64445	52.149.20.212	192.168.2.4
Nov 20, 2024 03:11:19.064490080 CET	64445	443	192.168.2.4	52.149.20.212
Nov 20, 2024 03:11:19.069098949 CET	64445	443	192.168.2.4	52.149.20.212
Nov 20, 2024 03:11:19.069114923 CET	443	64445	52.149.20.212	192.168.2.4
Nov 20, 2024 03:11:19.069138050 CET	64445	443	192.168.2.4	52.149.20.212
Nov 20, 2024 03:11:19.069144011 CET	443	64445	52.149.20.212	192.168.2.4
Nov 20, 2024 03:11:19.133099079 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.133150101 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.133264065 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.133285046 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.133335114 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.133359909 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.135303020 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.135363102 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.135417938 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.135432005 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.135471106 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.135497093 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.223046064 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.223113060 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.223160982 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.223180056 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.223207951 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.223241091 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.223582983 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.223625898 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.223661900 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.223673105 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.223723888 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.223742962 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.225367069 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.225406885 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.225447893 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.225457907 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.225501060 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.225524902 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.226398945 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.226438999 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.226480961 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.226490974 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.226525068 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.226562023 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.313643932 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.313688993 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.313735008 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.313749075 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.313774109 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.313796997 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.314321995 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.314383030 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.314419031 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.314429998 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.314455032 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.314491034 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.315418959 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.315459967 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.315501928 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.315511942 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.315536976 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.315562963 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.316442013 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.316481113 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.316519976 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.316530943 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.316555977 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.316603899 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.316721916 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.316761971 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.316800117 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.316811085 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.316843033 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.316862106 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.317646027 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.317701101 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.317734003 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.317744970 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.317773104 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.317800999 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.318295956 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.318378925 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.318392038 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.318459034 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.318516970 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.318540096 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.318556070 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.318602085 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.318617105 CET	64446	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.318639040 CET	443	64446	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.372647047 CET	64447	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.372711897 CET	443	64447	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.372813940 CET	64447	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.374339104 CET	64448	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.374362946 CET	443	64448	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.374450922 CET	64448	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.374700069 CET	64447	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.374732018 CET	443	64447	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.375515938 CET	64448	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.375539064 CET	443	64448	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.376449108 CET	64449	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.376517057 CET	443	64449	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.376590967 CET	64449	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.376831055 CET	64449	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.376864910 CET	443	64449	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.377882957 CET	64450	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.377906084 CET	443	64450	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.377985954 CET	64450	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.378695011 CET	64451	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.378725052 CET	443	64451	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.378830910 CET	64451	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.378901958 CET	64450	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.378926992 CET	443	64450	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:19.379045963 CET	64451	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:19.379067898 CET	443	64451	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.082433939 CET	443	64451	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.083056927 CET	64451	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.083146095 CET	443	64451	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.083648920 CET	64451	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.083664894 CET	443	64451	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.088725090 CET	443	64448	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.089122057 CET	64448	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.089170933 CET	443	64448	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.089653015 CET	64448	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.089672089 CET	443	64448	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.112512112 CET	443	64449	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.112992048 CET	64449	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.113043070 CET	443	64449	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.113532066 CET	64449	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.113544941 CET	443	64449	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.119734049 CET	443	64450	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.120151043 CET	64450	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.120171070 CET	443	64450	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.120938063 CET	64450	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.120944023 CET	443	64450	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.151355982 CET	443	64447	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.151771069 CET	64447	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.151791096 CET	443	64447	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.152390003 CET	64447	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.152400970 CET	443	64447	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.181837082 CET	443	64451	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.181971073 CET	443	64451	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.182059050 CET	64451	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.182284117 CET	64451	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.182326078 CET	443	64451	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.182367086 CET	64451	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.182383060 CET	443	64451	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.187083006 CET	64452	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.187167883 CET	443	64452	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.187262058 CET	64452	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.187401056 CET	64452	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.187429905 CET	443	64452	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.189840078 CET	443	64448	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.189975023 CET	443	64448	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.190047026 CET	64448	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.190104961 CET	64448	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.190104961 CET	64448	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.190138102 CET	443	64448	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.190162897 CET	443	64448	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.192945957 CET	64453	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.193034887 CET	443	64453	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.193115950 CET	64453	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.193298101 CET	64453	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.193335056 CET	443	64453	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.224824905 CET	443	64449	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.224879026 CET	443	64449	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.224970102 CET	64449	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.224998951 CET	443	64449	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.225064039 CET	64449	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.227380991 CET	64449	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.227416992 CET	443	64449	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.227447033 CET	64449	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.227461100 CET	443	64449	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.231246948 CET	443	64450	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.231271982 CET	443	64450	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.231353998 CET	64450	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.231385946 CET	443	64450	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.231447935 CET	64450	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.231468916 CET	443	64450	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.231518984 CET	443	64450	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.231520891 CET	64454	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.231554031 CET	443	64454	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.231570959 CET	64450	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.231631994 CET	64454	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.231729984 CET	64450	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.231756926 CET	443	64450	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.231780052 CET	64450	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.231792927 CET	443	64450	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.231975079 CET	64454	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.232001066 CET	443	64454	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.234520912 CET	64455	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.234549046 CET	443	64455	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.234630108 CET	64455	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.234761000 CET	64455	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.234786987 CET	443	64455	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.252022028 CET	443	64447	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.252043962 CET	443	64447	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.252109051 CET	64447	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.252131939 CET	443	64447	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.252154112 CET	443	64447	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.252192020 CET	64447	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.252233982 CET	64447	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.252410889 CET	64447	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.252429962 CET	443	64447	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.252454042 CET	64447	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.252464056 CET	443	64447	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.255290985 CET	64456	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.255327940 CET	443	64456	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.255397081 CET	64456	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.255685091 CET	64456	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.255696058 CET	443	64456	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.786071062 CET	443	64454	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.786866903 CET	64454	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.786905050 CET	443	64454	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.787573099 CET	64454	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.787585974 CET	443	64454	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.849977016 CET	443	64453	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.850474119 CET	64453	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.850526094 CET	443	64453	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.851016998 CET	64453	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.851032972 CET	443	64453	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.870351076 CET	443	64455	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.870949984 CET	64455	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.870965958 CET	443	64455	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.871762991 CET	64455	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.871774912 CET	443	64455	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.876161098 CET	443	64452	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.876730919 CET	64452	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.876749039 CET	443	64452	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.877325058 CET	64452	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.877335072 CET	443	64452	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.886388063 CET	443	64454	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.886450052 CET	443	64454	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.886512995 CET	64454	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.886703014 CET	64454	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.886734009 CET	443	64454	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.886759043 CET	64454	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.886775017 CET	443	64454	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.889914989 CET	64457	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.890002012 CET	443	64457	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.890099049 CET	64457	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.890348911 CET	64457	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.890386105 CET	443	64457	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.903162956 CET	443	64456	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.903588057 CET	64456	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.903615952 CET	443	64456	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.904180050 CET	64456	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.904185057 CET	443	64456	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.949278116 CET	443	64453	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.949440956 CET	443	64453	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.949642897 CET	64453	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.949696064 CET	64453	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.949726105 CET	443	64453	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.949750900 CET	64453	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.949765921 CET	443	64453	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.953103065 CET	64458	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.953135014 CET	443	64458	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.953224897 CET	64458	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.953421116 CET	64458	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.953430891 CET	443	64458	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.970870972 CET	443	64455	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.970933914 CET	443	64455	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.971152067 CET	64455	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.971223116 CET	64455	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.971241951 CET	443	64455	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.971263885 CET	64455	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.971273899 CET	443	64455	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.973687887 CET	64459	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.973728895 CET	443	64459	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.973825932 CET	64459	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.973978996 CET	64459	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.974006891 CET	443	64459	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.978888035 CET	443	64452	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.979115963 CET	443	64452	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.979191065 CET	64452	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.979240894 CET	64452	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.979240894 CET	64452	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.979263067 CET	443	64452	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.979283094 CET	443	64452	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.981659889 CET	64460	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.981745005 CET	443	64460	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:20.981834888 CET	64460	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.981992006 CET	64460	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:20.982024908 CET	443	64460	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.006912947 CET	443	64456	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.006972075 CET	443	64456	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.007126093 CET	64456	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.007181883 CET	64456	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.007189989 CET	443	64456	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.007200003 CET	64456	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.007204056 CET	443	64456	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.009731054 CET	64461	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.009763002 CET	443	64461	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.009840965 CET	64461	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.010005951 CET	64461	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.010016918 CET	443	64461	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.538005114 CET	443	64457	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.538610935 CET	64457	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.538677931 CET	443	64457	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.539074898 CET	64457	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.539091110 CET	443	64457	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.594624043 CET	443	64458	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.597611904 CET	64458	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.597632885 CET	443	64458	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.598262072 CET	64458	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.598267078 CET	443	64458	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.614126921 CET	443	64459	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.614625931 CET	64459	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.614653111 CET	443	64459	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.615030050 CET	64459	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.615041971 CET	443	64459	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.636501074 CET	443	64460	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.636979103 CET	64460	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.637021065 CET	443	64460	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.637377977 CET	64460	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.637392998 CET	443	64460	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.638751030 CET	443	64457	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.638812065 CET	443	64457	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.639028072 CET	64457	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.639081001 CET	64457	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.639113903 CET	443	64457	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.639137983 CET	64457	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.639152050 CET	443	64457	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.642391920 CET	64462	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.642442942 CET	443	64462	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.642546892 CET	64462	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.642736912 CET	64462	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.642761946 CET	443	64462	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.656625032 CET	443	64461	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.657166958 CET	64461	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.657185078 CET	443	64461	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.657799959 CET	64461	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.657805920 CET	443	64461	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.703603029 CET	443	64458	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.703758955 CET	443	64458	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.703888893 CET	64458	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.703912973 CET	64458	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.703926086 CET	443	64458	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.703973055 CET	64458	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.703977108 CET	443	64458	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.706522942 CET	64463	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.706557035 CET	443	64463	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.706628084 CET	64463	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.706800938 CET	64463	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.706816912 CET	443	64463	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.718235016 CET	443	64459	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.718298912 CET	443	64459	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.718440056 CET	64459	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.718493938 CET	64459	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.718513012 CET	443	64459	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.718535900 CET	64459	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.718547106 CET	443	64459	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.720858097 CET	64464	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.720901012 CET	443	64464	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.720993996 CET	64464	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.721208096 CET	64464	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.721241951 CET	443	64464	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.737298012 CET	443	64460	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.737425089 CET	443	64460	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.737653017 CET	64460	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.737740040 CET	64460	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.737740040 CET	64460	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.737766027 CET	443	64460	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.737791061 CET	443	64460	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.739962101 CET	64465	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.739983082 CET	443	64465	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.740252972 CET	64465	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.740252972 CET	64465	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.740277052 CET	443	64465	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.769270897 CET	443	64461	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.769340992 CET	443	64461	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.769484997 CET	64461	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.769516945 CET	64461	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.769526958 CET	443	64461	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.769541979 CET	64461	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.769546986 CET	443	64461	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.771919012 CET	64466	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.771954060 CET	443	64466	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:21.772074938 CET	64466	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.772253036 CET	64466	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:21.772277117 CET	443	64466	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.326703072 CET	443	64462	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.327333927 CET	64462	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.327372074 CET	443	64462	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.327831984 CET	64462	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.327847958 CET	443	64462	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.371961117 CET	443	64464	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.372442007 CET	64464	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.372499943 CET	443	64464	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.373095989 CET	64464	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.373115063 CET	443	64464	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.376010895 CET	443	64463	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.376274109 CET	64463	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.376297951 CET	443	64463	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.376590967 CET	64463	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.376599073 CET	443	64463	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.432637930 CET	443	64465	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.433196068 CET	64465	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.433214903 CET	443	64465	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.433501959 CET	64465	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.433507919 CET	443	64465	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.441680908 CET	443	64462	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.441757917 CET	443	64462	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.441854954 CET	64462	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.441958904 CET	64462	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.441958904 CET	64462	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.442004919 CET	443	64462	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.442024946 CET	443	64462	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.444961071 CET	64467	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.444983006 CET	443	64467	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.445071936 CET	64467	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.445251942 CET	64467	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.445262909 CET	443	64467	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.446279049 CET	443	64466	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.446614027 CET	64466	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.446633101 CET	443	64466	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.446966887 CET	64466	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.446978092 CET	443	64466	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.472938061 CET	443	64464	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.473083973 CET	443	64464	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.473165035 CET	64464	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.473424911 CET	64464	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.473424911 CET	64464	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.473455906 CET	443	64464	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.473479986 CET	443	64464	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.475701094 CET	64468	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.475732088 CET	443	64468	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.475820065 CET	64468	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.475982904 CET	64468	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.476001024 CET	443	64468	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.482573032 CET	443	64463	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.482702017 CET	443	64463	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.482770920 CET	64463	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.482841015 CET	64463	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.482850075 CET	443	64463	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.482863903 CET	64463	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.482868910 CET	443	64463	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.485832930 CET	64469	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.485873938 CET	443	64469	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.485960007 CET	64469	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.486143112 CET	64469	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.486170053 CET	443	64469	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.536204100 CET	443	64465	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.536356926 CET	443	64465	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.536528111 CET	64465	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.536644936 CET	64465	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.536653042 CET	443	64465	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.536663055 CET	64465	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.536668062 CET	443	64465	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.538991928 CET	64470	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.539033890 CET	443	64470	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.539117098 CET	64470	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.539275885 CET	64470	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.539290905 CET	443	64470	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.552731037 CET	443	64466	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.552805901 CET	443	64466	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.552886009 CET	64466	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.553009033 CET	64466	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.553029060 CET	443	64466	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.553052902 CET	64466	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.553066015 CET	443	64466	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.555277109 CET	64471	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.555305004 CET	443	64471	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:22.555408001 CET	64471	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.555567026 CET	64471	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:22.555589914 CET	443	64471	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.092432022 CET	443	64467	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.092911959 CET	64467	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.092931032 CET	443	64467	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.093559027 CET	64467	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.093564987 CET	443	64467	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.115885973 CET	443	64468	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.116235018 CET	64468	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.116260052 CET	443	64468	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.116787910 CET	64468	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.116796017 CET	443	64468	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.151592970 CET	443	64469	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.151940107 CET	64469	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.151972055 CET	443	64469	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.152451038 CET	64469	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.152465105 CET	443	64469	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.188652039 CET	443	64470	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.188983917 CET	64470	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.188996077 CET	443	64470	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.189522028 CET	64470	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.189528942 CET	443	64470	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.193285942 CET	443	64467	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.193357944 CET	443	64467	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.193412066 CET	64467	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.193551064 CET	64467	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.193562031 CET	443	64467	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.193569899 CET	64467	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.193573952 CET	443	64467	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.196522951 CET	64472	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.196599007 CET	443	64472	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.196686029 CET	64472	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.196878910 CET	64472	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.196912050 CET	443	64472	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.215022087 CET	443	64468	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.215167046 CET	443	64468	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.215220928 CET	64468	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.215244055 CET	64468	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.215259075 CET	443	64468	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.215274096 CET	64468	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.215281963 CET	443	64468	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.217358112 CET	64473	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.217458963 CET	443	64473	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.217536926 CET	64473	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.217650890 CET	64473	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.217673063 CET	443	64473	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.239265919 CET	443	64471	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.239594936 CET	64471	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.239615917 CET	443	64471	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.240144014 CET	64471	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.240154982 CET	443	64471	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.254332066 CET	443	64469	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.254460096 CET	443	64469	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.254523993 CET	64469	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.254564047 CET	64469	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.254602909 CET	443	64469	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.254632950 CET	64469	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.254647017 CET	443	64469	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.256791115 CET	64474	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.256830931 CET	443	64474	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.256903887 CET	64474	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.257078886 CET	64474	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.257112980 CET	443	64474	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.289077997 CET	443	64470	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.289175034 CET	443	64470	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.289252043 CET	64470	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.289285898 CET	64470	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.289307117 CET	443	64470	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.289320946 CET	64470	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.289329052 CET	443	64470	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.291492939 CET	64475	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.291527987 CET	443	64475	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.291603088 CET	64475	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.291737080 CET	64475	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.291759014 CET	443	64475	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.346229076 CET	443	64471	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.346332073 CET	443	64471	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.346386909 CET	64471	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.346545935 CET	64471	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.346566916 CET	443	64471	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.346589088 CET	64471	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.346601009 CET	443	64471	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.349267960 CET	64476	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.349339008 CET	443	64476	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.349406958 CET	64476	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.349570990 CET	64476	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.349601030 CET	443	64476	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.839858055 CET	443	64472	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.840436935 CET	64472	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.840482950 CET	443	64472	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.841031075 CET	64472	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.841044903 CET	443	64472	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.866854906 CET	443	64473	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.867213964 CET	64473	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.867249012 CET	443	64473	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.867661953 CET	64473	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.867677927 CET	443	64473	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.938975096 CET	443	64474	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.939399958 CET	64474	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.939441919 CET	443	64474	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.939909935 CET	443	64472	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.939910889 CET	64474	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.939925909 CET	443	64474	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.939974070 CET	443	64472	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.940187931 CET	64472	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.940238953 CET	64472	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.940238953 CET	64472	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.940272093 CET	443	64472	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.940294027 CET	443	64472	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.943223953 CET	64477	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.943295002 CET	443	64477	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.943387032 CET	64477	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.943517923 CET	64477	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.943547964 CET	443	64477	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.966911077 CET	443	64473	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.967046022 CET	443	64473	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.967119932 CET	64473	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.967170000 CET	64473	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.967170000 CET	64473	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.967200041 CET	443	64473	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.967221975 CET	443	64473	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.969512939 CET	64478	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.969552994 CET	443	64478	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.969626904 CET	64478	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.969746113 CET	64478	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.969754934 CET	443	64478	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.974069118 CET	443	64475	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.974371910 CET	64475	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.974423885 CET	443	64475	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.974891901 CET	64475	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:23.974901915 CET	443	64475	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:23.997107983 CET	443	64476	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.001332045 CET	64476	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.001374960 CET	443	64476	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.001952887 CET	64476	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.001959085 CET	443	64476	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.044015884 CET	443	64474	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.044178009 CET	443	64474	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.044280052 CET	64474	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.044339895 CET	64474	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.044339895 CET	64474	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.044367075 CET	443	64474	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.044389009 CET	443	64474	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.047142982 CET	64479	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.047211885 CET	443	64479	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.047349930 CET	64479	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.047462940 CET	64479	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.047492981 CET	443	64479	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.077166080 CET	443	64475	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.077316999 CET	443	64475	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.077383041 CET	64475	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.077425957 CET	64475	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.077425957 CET	64475	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.077447891 CET	443	64475	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.077469110 CET	443	64475	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.079632044 CET	64480	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.079678059 CET	443	64480	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.079756021 CET	64480	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.079869986 CET	64480	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.079886913 CET	443	64480	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.105530977 CET	443	64476	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.105602980 CET	443	64476	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.105705976 CET	64476	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.105837107 CET	64476	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.105863094 CET	443	64476	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.105923891 CET	64476	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.105937958 CET	443	64476	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.107942104 CET	64481	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.107968092 CET	443	64481	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.108042955 CET	64481	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.108160973 CET	64481	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.108172894 CET	443	64481	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.587404966 CET	443	64477	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.588134050 CET	64477	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.588192940 CET	443	64477	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.588632107 CET	64477	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.588645935 CET	443	64477	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.612632036 CET	443	64478	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.612935066 CET	64478	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.612972975 CET	443	64478	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.613401890 CET	64478	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.613415956 CET	443	64478	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.689668894 CET	443	64477	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.689795971 CET	443	64477	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.689914942 CET	64477	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.692522049 CET	64477	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.692568064 CET	443	64477	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.692599058 CET	64477	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.692615032 CET	443	64477	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.695858002 CET	64482	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.695964098 CET	443	64482	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.696088076 CET	64482	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.696228027 CET	64482	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.696258068 CET	443	64482	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.701513052 CET	443	64479	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.701908112 CET	64479	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.701930046 CET	443	64479	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.702481985 CET	64479	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.702491999 CET	443	64479	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.712215900 CET	443	64478	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.712363958 CET	443	64478	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.712438107 CET	64478	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.712488890 CET	64478	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.712517977 CET	443	64478	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.712541103 CET	64478	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.712553978 CET	443	64478	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.714219093 CET	64483	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.714241982 CET	443	64483	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.714665890 CET	64483	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.714767933 CET	64483	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.714776993 CET	443	64483	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.742964983 CET	443	64481	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.743315935 CET	64481	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.743324041 CET	443	64481	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.743756056 CET	64481	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.743760109 CET	443	64481	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.750514984 CET	443	64480	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.750873089 CET	64480	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.750906944 CET	443	64480	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.751250029 CET	64480	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.751261950 CET	443	64480	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.802907944 CET	443	64479	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.803035975 CET	443	64479	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.803136110 CET	64479	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.803277969 CET	64479	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.803318977 CET	443	64479	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.803369045 CET	64479	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.803384066 CET	443	64479	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.805823088 CET	64484	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.805867910 CET	443	64484	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.805948019 CET	64484	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.806277990 CET	64484	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.806298018 CET	443	64484	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.842963934 CET	443	64481	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.843039989 CET	443	64481	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.843106985 CET	64481	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.843195915 CET	64481	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.843202114 CET	443	64481	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.843211889 CET	64481	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.843215942 CET	443	64481	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.845520020 CET	64485	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.845590115 CET	443	64485	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.845665932 CET	64485	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.845799923 CET	64485	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.845834970 CET	443	64485	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.858822107 CET	443	64480	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.858956099 CET	443	64480	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.859021902 CET	64480	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.859061956 CET	64480	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.859061956 CET	64480	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.859082937 CET	443	64480	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.859096050 CET	443	64480	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.861207962 CET	64486	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.861231089 CET	443	64486	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:24.861294031 CET	64486	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.861427069 CET	64486	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:24.861442089 CET	443	64486	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.341634989 CET	443	64482	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.342168093 CET	64482	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.342222929 CET	443	64482	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.342775106 CET	64482	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.342792988 CET	443	64482	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.383996010 CET	443	64483	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.384639025 CET	64483	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.384650946 CET	443	64483	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.385251999 CET	64483	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.385256052 CET	443	64483	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.442790031 CET	443	64482	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.442934990 CET	443	64482	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.443033934 CET	64482	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.443120003 CET	64482	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.443150997 CET	443	64482	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.443248987 CET	64482	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.443264008 CET	443	64482	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.446027994 CET	64487	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.446084976 CET	443	64487	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.446177959 CET	64487	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.446290016 CET	64487	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.446320057 CET	443	64487	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.484060049 CET	443	64485	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.484458923 CET	64485	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.484509945 CET	443	64485	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.485016108 CET	64485	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.485028982 CET	443	64485	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.505111933 CET	443	64483	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.505240917 CET	443	64483	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.505423069 CET	64483	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.505479097 CET	64483	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.505490065 CET	443	64483	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.505496979 CET	64483	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.505501032 CET	443	64483	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.507694006 CET	64488	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.507766962 CET	443	64488	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.507848024 CET	64488	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.507982016 CET	64488	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.508012056 CET	443	64488	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.509691000 CET	443	64486	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.510016918 CET	64486	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.510042906 CET	443	64486	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.510533094 CET	64486	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.510539055 CET	443	64486	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.512399912 CET	443	64484	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.512645006 CET	64484	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.512661934 CET	443	64484	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.513092041 CET	64484	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.513097048 CET	443	64484	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.587934971 CET	443	64485	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.588001013 CET	443	64485	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.588159084 CET	64485	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.588255882 CET	64485	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.588279009 CET	443	64485	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.588294029 CET	64485	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.588300943 CET	443	64485	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.590599060 CET	64489	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.590657949 CET	443	64489	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.590756893 CET	64489	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.590938091 CET	64489	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.590976954 CET	443	64489	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.608338118 CET	443	64486	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.608477116 CET	443	64486	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.608540058 CET	64486	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.608572960 CET	64486	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.608586073 CET	443	64486	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.608603954 CET	64486	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.608609915 CET	443	64486	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.610760927 CET	64490	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.610826015 CET	443	64490	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.610909939 CET	64490	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.611068010 CET	64490	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.611099005 CET	443	64490	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.615022898 CET	443	64484	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.615174055 CET	443	64484	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.615235090 CET	64484	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.615274906 CET	64484	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.615279913 CET	443	64484	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.615295887 CET	64484	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.615300894 CET	443	64484	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.617206097 CET	64491	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.617233038 CET	443	64491	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:25.617330074 CET	64491	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.617697954 CET	64491	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:25.617719889 CET	443	64491	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.098031044 CET	443	64487	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.098778963 CET	64487	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.098836899 CET	443	64487	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.099383116 CET	64487	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.099395990 CET	443	64487	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.156564951 CET	443	64488	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.157018900 CET	64488	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.157049894 CET	443	64488	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.157561064 CET	64488	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.157574892 CET	443	64488	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.202152967 CET	443	64487	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.202426910 CET	443	64487	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.202513933 CET	64487	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.202559948 CET	64487	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.202608109 CET	443	64487	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.202641010 CET	64487	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.202655077 CET	443	64487	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.205874920 CET	64493	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.205956936 CET	443	64493	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.206053972 CET	64493	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.206207991 CET	64493	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.206231117 CET	443	64493	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.252084017 CET	443	64489	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.252756119 CET	64489	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.252799988 CET	443	64489	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.253272057 CET	64489	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.253279924 CET	443	64489	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.257556915 CET	443	64488	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.257833004 CET	443	64488	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.257913113 CET	64488	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.257980108 CET	64488	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.257980108 CET	64488	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.258008957 CET	443	64488	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.258034945 CET	443	64488	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.260732889 CET	64494	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.260812998 CET	443	64494	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.260915041 CET	64494	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.261087894 CET	64494	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.261116028 CET	443	64494	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.265280008 CET	443	64491	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.265641928 CET	64491	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.265661001 CET	443	64491	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.266156912 CET	64491	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.266166925 CET	443	64491	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.299287081 CET	443	64490	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.299628019 CET	64490	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.299669981 CET	443	64490	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.300101995 CET	64490	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.300113916 CET	443	64490	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.355246067 CET	443	64489	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.355300903 CET	443	64489	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.355554104 CET	64489	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.355596066 CET	64489	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.355613947 CET	443	64489	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.355663061 CET	64489	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.355670929 CET	443	64489	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.358392954 CET	64495	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.358459949 CET	443	64495	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.358558893 CET	64495	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.358761072 CET	64495	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.358793020 CET	443	64495	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.376511097 CET	443	64491	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.376749992 CET	443	64491	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.376831055 CET	64491	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.376868010 CET	64491	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.376888037 CET	443	64491	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.376912117 CET	64491	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.376923084 CET	443	64491	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.379348993 CET	64496	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.379390001 CET	443	64496	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.379481077 CET	64496	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.379674911 CET	64496	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.379698992 CET	443	64496	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.403239012 CET	443	64490	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.403409004 CET	443	64490	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.403491974 CET	64490	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.403573036 CET	64490	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.403573036 CET	64490	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.403603077 CET	443	64490	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.403629065 CET	443	64490	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.405891895 CET	64497	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.405932903 CET	443	64497	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.406038046 CET	64497	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.406182051 CET	64497	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.406209946 CET	443	64497	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.859505892 CET	443	64493	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.860443115 CET	64493	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.860488892 CET	443	64493	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.861296892 CET	64493	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.861309052 CET	443	64493	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.905806065 CET	443	64494	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.906480074 CET	64494	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.906557083 CET	443	64494	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.906893969 CET	64494	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.906910896 CET	443	64494	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.964313030 CET	443	64493	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.964458942 CET	443	64493	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.964541912 CET	64493	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.964693069 CET	64493	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.964693069 CET	64493	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.964732885 CET	443	64493	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.964772940 CET	443	64493	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.967710018 CET	64498	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.967770100 CET	443	64498	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.967858076 CET	64498	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.967976093 CET	64498	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.967995882 CET	443	64498	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.992332935 CET	443	64495	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.992825031 CET	64495	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.992866039 CET	443	64495	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:26.993396997 CET	64495	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:26.993410110 CET	443	64495	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.006810904 CET	443	64494	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.006988049 CET	443	64494	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.007055044 CET	64494	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.007143021 CET	64494	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.007143021 CET	64494	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.007179976 CET	443	64494	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.007204056 CET	443	64494	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.009376049 CET	64499	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.009427071 CET	443	64499	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.009527922 CET	64499	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.009708881 CET	64499	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.009737015 CET	443	64499	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.058341980 CET	443	64497	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.059103012 CET	64497	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.059127092 CET	443	64497	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.060019016 CET	64497	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.060029984 CET	443	64497	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.067091942 CET	443	64496	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.067491055 CET	64496	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.067514896 CET	443	64496	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.068070889 CET	64496	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.068079948 CET	443	64496	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.094316959 CET	443	64495	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.094388008 CET	443	64495	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.094449997 CET	64495	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.098071098 CET	64495	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.098095894 CET	443	64495	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.101497889 CET	64500	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.101550102 CET	443	64500	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.101649046 CET	64500	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.101787090 CET	64500	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.101816893 CET	443	64500	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.159545898 CET	443	64497	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.159693956 CET	443	64497	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.159774065 CET	64497	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.159926891 CET	64497	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.159965992 CET	443	64497	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.159992933 CET	64497	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.160008907 CET	443	64497	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.162612915 CET	64501	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.162687063 CET	443	64501	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.162770033 CET	64501	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.162959099 CET	64501	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.162992001 CET	443	64501	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.175331116 CET	443	64496	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.175483942 CET	443	64496	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.175546885 CET	64496	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.175622940 CET	64496	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.175638914 CET	443	64496	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.175654888 CET	64496	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.175662041 CET	443	64496	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.177928925 CET	64502	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.178025007 CET	443	64502	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.178108931 CET	64502	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.178216934 CET	64502	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.178251028 CET	443	64502	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.611140013 CET	443	64498	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.611850977 CET	64498	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.611912966 CET	443	64498	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.612379074 CET	64498	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.612396955 CET	443	64498	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.657005072 CET	443	64499	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.657529116 CET	64499	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.657572985 CET	443	64499	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.658098936 CET	64499	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.658111095 CET	443	64499	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.710447073 CET	443	64498	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.710612059 CET	443	64498	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.710726976 CET	64498	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.710839033 CET	64498	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.710886955 CET	443	64498	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.710915089 CET	64498	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.710931063 CET	443	64498	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.714277983 CET	64503	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.714369059 CET	443	64503	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.714468956 CET	64503	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.714608908 CET	64503	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.714632988 CET	443	64503	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.738835096 CET	443	64500	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.739264011 CET	64500	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.739337921 CET	443	64500	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.739953995 CET	64500	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.740008116 CET	443	64500	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.770179033 CET	443	64499	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.770365953 CET	443	64499	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.770466089 CET	64499	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.770536900 CET	64499	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.770536900 CET	64499	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.770571947 CET	443	64499	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.770601034 CET	443	64499	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.773729086 CET	64504	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.773766041 CET	443	64504	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.773844004 CET	64504	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.773978949 CET	64504	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.773989916 CET	443	64504	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.813823938 CET	443	64501	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.814443111 CET	64501	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.814472914 CET	443	64501	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.815069914 CET	64501	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.815083027 CET	443	64501	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.846661091 CET	443	64502	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.847038031 CET	64502	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.847085953 CET	443	64502	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.847439051 CET	64502	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.847451925 CET	443	64502	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.850904942 CET	443	64500	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.850956917 CET	443	64500	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.851020098 CET	64500	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.851548910 CET	64500	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.851548910 CET	64500	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.851593018 CET	443	64500	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.851624966 CET	443	64500	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.854629040 CET	64505	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.854715109 CET	443	64505	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.854799032 CET	64505	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.854948997 CET	64505	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.855000019 CET	443	64505	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.925921917 CET	443	64501	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.926084042 CET	443	64501	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.926156044 CET	64501	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.926215887 CET	64501	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.926215887 CET	64501	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.926264048 CET	443	64501	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.926287889 CET	443	64501	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.929300070 CET	64506	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.929330111 CET	443	64506	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.929466963 CET	64506	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.929611921 CET	64506	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.929624081 CET	443	64506	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.958678007 CET	443	64502	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.958827019 CET	443	64502	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.958900928 CET	64502	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.958978891 CET	64502	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.958978891 CET	64502	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.959022045 CET	443	64502	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.959048986 CET	443	64502	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.960989952 CET	64507	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.961036921 CET	443	64507	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:27.961112022 CET	64507	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.961227894 CET	64507	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:27.961251974 CET	443	64507	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.394124031 CET	443	64503	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.394810915 CET	64503	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.394843102 CET	443	64503	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.395493031 CET	64503	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.395500898 CET	443	64503	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.481663942 CET	443	64504	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.482254982 CET	64504	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.482305050 CET	443	64504	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.482887030 CET	64504	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.482899904 CET	443	64504	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.494910955 CET	443	64503	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.495127916 CET	443	64503	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.495250940 CET	64503	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.495301008 CET	64503	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.495301008 CET	64503	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.495332956 CET	443	64503	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.495343924 CET	443	64503	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.498861074 CET	64508	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.498951912 CET	443	64508	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.499063969 CET	64508	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.499221087 CET	64508	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.499257088 CET	443	64508	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.575191021 CET	443	64505	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.575706005 CET	64505	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.575781107 CET	443	64505	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.576302052 CET	64505	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.576314926 CET	443	64505	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.582807064 CET	443	64504	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.582890987 CET	443	64504	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.583054066 CET	64504	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.583087921 CET	64504	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.583108902 CET	443	64504	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.583121061 CET	64504	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.583128929 CET	443	64504	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.586154938 CET	64509	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.586186886 CET	443	64509	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.586270094 CET	64509	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.586393118 CET	64509	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.586401939 CET	443	64509	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.621349096 CET	443	64506	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.627646923 CET	64506	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.627691031 CET	443	64506	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.628158092 CET	64506	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.628169060 CET	443	64506	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.650177956 CET	443	64507	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.650830984 CET	64507	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.650866032 CET	443	64507	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.651231050 CET	64507	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.651242971 CET	443	64507	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.679560900 CET	443	64505	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.679605007 CET	443	64505	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.679944038 CET	64505	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.679987907 CET	64505	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.679987907 CET	64505	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.680010080 CET	443	64505	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.680022955 CET	443	64505	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.683440924 CET	64510	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.683501005 CET	443	64510	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.683584929 CET	64510	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.683708906 CET	64510	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.683737040 CET	443	64510	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.713395119 CET	49724	80	192.168.2.4	199.232.210.172
Nov 20, 2024 03:11:28.718576908 CET	80	49724	199.232.210.172	192.168.2.4
Nov 20, 2024 03:11:28.718694925 CET	49724	80	192.168.2.4	199.232.210.172
Nov 20, 2024 03:11:28.729402065 CET	443	64506	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.729551077 CET	443	64506	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.729680061 CET	64506	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.730068922 CET	64506	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.730092049 CET	443	64506	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.730108976 CET	64506	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.730114937 CET	443	64506	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.733611107 CET	64511	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.733642101 CET	443	64511	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.733738899 CET	64511	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.733918905 CET	64511	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.733932018 CET	443	64511	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.753092051 CET	443	64507	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.753235102 CET	443	64507	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.753371954 CET	64507	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.753698111 CET	64507	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.753721952 CET	443	64507	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.753739119 CET	64507	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.753746033 CET	443	64507	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.757046938 CET	64512	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.757116079 CET	443	64512	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:28.757215977 CET	64512	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.757419109 CET	64512	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:28.757436991 CET	443	64512	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.141033888 CET	443	64508	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.141885996 CET	64508	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.141944885 CET	443	64508	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.142452002 CET	64508	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.142468929 CET	443	64508	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.241323948 CET	443	64509	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.242016077 CET	64509	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.242028952 CET	443	64509	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.242115974 CET	443	64508	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.242185116 CET	443	64508	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.242268085 CET	64508	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.242451906 CET	64508	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.242492914 CET	443	64508	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.242525101 CET	64508	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.242539883 CET	443	64508	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.242701054 CET	64509	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.242706060 CET	443	64509	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.246037006 CET	64513	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.246150017 CET	443	64513	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.246252060 CET	64513	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.246407986 CET	64513	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.246442080 CET	443	64513	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.328126907 CET	443	64510	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.328757048 CET	64510	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.328790903 CET	443	64510	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.329329014 CET	64510	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.329344988 CET	443	64510	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.345626116 CET	443	64509	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.345784903 CET	443	64509	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.345854044 CET	64509	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.345927954 CET	64509	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.345942020 CET	443	64509	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.345969915 CET	64509	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.345973969 CET	443	64509	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.349287987 CET	64514	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.349383116 CET	443	64514	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.349487066 CET	64514	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.349628925 CET	64514	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.349651098 CET	443	64514	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.382771015 CET	443	64511	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.383166075 CET	64511	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.383174896 CET	443	64511	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.383749008 CET	64511	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.383754015 CET	443	64511	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.428421021 CET	443	64512	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.428915977 CET	64512	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.428972006 CET	443	64512	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.429508924 CET	64512	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.429522991 CET	443	64512	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.430279970 CET	443	64510	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.430327892 CET	443	64510	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.430398941 CET	64510	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.430552006 CET	64510	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.430599928 CET	443	64510	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.430633068 CET	64510	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.430649042 CET	443	64510	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.433697939 CET	64515	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.433760881 CET	443	64515	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.433845043 CET	64515	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.433979988 CET	64515	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.433995962 CET	443	64515	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.484848022 CET	443	64511	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.484997034 CET	443	64511	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.485081911 CET	64511	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.485173941 CET	64511	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.485187054 CET	443	64511	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.485197067 CET	64511	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.485202074 CET	443	64511	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.488117933 CET	64516	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.488200903 CET	443	64516	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.488307953 CET	64516	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.488445044 CET	64516	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.488476038 CET	443	64516	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.532898903 CET	443	64512	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.533070087 CET	443	64512	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.533176899 CET	64512	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.533325911 CET	64512	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.533325911 CET	64512	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.533371925 CET	443	64512	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.533396959 CET	443	64512	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.536716938 CET	64517	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.536822081 CET	443	64517	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.536938906 CET	64517	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.537074089 CET	64517	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.537105083 CET	443	64517	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.894785881 CET	443	64513	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.895359039 CET	64513	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.895425081 CET	443	64513	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.896099091 CET	64513	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.896112919 CET	443	64513	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.993918896 CET	443	64513	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.994168997 CET	443	64513	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.994241953 CET	64513	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.994306087 CET	64513	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.994306087 CET	64513	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.994364977 CET	443	64513	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.994388103 CET	443	64513	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.997422934 CET	64518	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.997512102 CET	443	64518	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:29.997601032 CET	64518	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.997795105 CET	64518	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:29.997824907 CET	443	64518	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.002795935 CET	443	64514	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.003211021 CET	64514	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.003271103 CET	443	64514	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.003825903 CET	64514	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.003846884 CET	443	64514	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.067147017 CET	443	64515	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.067528963 CET	64515	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.067550898 CET	443	64515	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.067989111 CET	64515	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.068001032 CET	443	64515	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.101984978 CET	443	64514	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.102127075 CET	443	64514	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.102210999 CET	64514	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.102327108 CET	64514	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.102327108 CET	64514	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.102374077 CET	443	64514	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.102400064 CET	443	64514	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.105566025 CET	64519	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.105609894 CET	443	64519	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.105676889 CET	64519	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.105879068 CET	64519	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.105897903 CET	443	64519	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.165400982 CET	443	64516	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.165802956 CET	64516	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.165867090 CET	443	64516	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.166572094 CET	64516	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.166584015 CET	443	64516	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.166980028 CET	443	64515	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.167047024 CET	443	64515	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.167109013 CET	64515	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.167202950 CET	64515	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.167202950 CET	64515	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.167242050 CET	443	64515	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.167268991 CET	443	64515	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.170911074 CET	64520	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.170948029 CET	443	64520	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.171133041 CET	64520	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.171133041 CET	64520	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.171163082 CET	443	64520	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.181292057 CET	443	64517	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.181947947 CET	64517	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.181977034 CET	443	64517	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.182813883 CET	64517	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.182825089 CET	443	64517	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.267812967 CET	443	64516	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.267982006 CET	443	64516	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.268048048 CET	64516	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.268160105 CET	64516	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.268198967 CET	443	64516	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.268225908 CET	64516	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.268239021 CET	443	64516	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.271503925 CET	64521	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.271593094 CET	443	64521	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.271676064 CET	64521	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.271859884 CET	64521	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.271884918 CET	443	64521	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.280744076 CET	443	64517	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.280886889 CET	443	64517	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.280942917 CET	64517	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.280986071 CET	64517	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.281006098 CET	443	64517	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.281018972 CET	64517	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.281025887 CET	443	64517	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.283485889 CET	64522	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.283523083 CET	443	64522	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.283576012 CET	64522	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.283754110 CET	64522	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.283766985 CET	443	64522	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.480123997 CET	64523	443	192.168.2.4	142.250.186.132
Nov 20, 2024 03:11:30.480217934 CET	443	64523	142.250.186.132	192.168.2.4
Nov 20, 2024 03:11:30.480334044 CET	64523	443	192.168.2.4	142.250.186.132
Nov 20, 2024 03:11:30.480679035 CET	64523	443	192.168.2.4	142.250.186.132
Nov 20, 2024 03:11:30.480717897 CET	443	64523	142.250.186.132	192.168.2.4
Nov 20, 2024 03:11:30.684551954 CET	443	64518	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.685240030 CET	64518	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.685286045 CET	443	64518	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.685868025 CET	64518	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.685878992 CET	443	64518	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.763930082 CET	443	64519	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.764664888 CET	64519	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.764698982 CET	443	64519	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.765014887 CET	64519	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.765022993 CET	443	64519	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.788125992 CET	443	64518	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.788203001 CET	443	64518	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.788314104 CET	64518	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.788553953 CET	64518	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.788553953 CET	64518	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.788599968 CET	443	64518	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.788628101 CET	443	64518	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.792130947 CET	64524	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.792222977 CET	443	64524	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.792340040 CET	64524	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.792490005 CET	64524	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.792522907 CET	443	64524	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.869817019 CET	443	64519	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.869965076 CET	443	64519	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.870035887 CET	64519	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.870115042 CET	64519	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.870132923 CET	443	64519	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.870147943 CET	64519	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.870155096 CET	443	64519	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.870819092 CET	443	64521	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.872502089 CET	64521	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.872565031 CET	443	64521	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.873456001 CET	64521	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.873470068 CET	443	64521	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.875863075 CET	64525	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.875891924 CET	443	64525	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.875973940 CET	64525	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.876113892 CET	64525	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.876122952 CET	443	64525	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.933374882 CET	443	64522	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.934047937 CET	64522	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.934079885 CET	443	64522	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.934679985 CET	64522	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.934684992 CET	443	64522	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.975713015 CET	443	64521	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.975858927 CET	443	64521	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.975971937 CET	64521	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.976208925 CET	64521	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.976268053 CET	443	64521	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.976301908 CET	64521	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.976319075 CET	443	64521	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.979371071 CET	64526	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.979424000 CET	443	64526	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:30.979527950 CET	64526	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.979667902 CET	64526	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:30.979684114 CET	443	64526	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.015889883 CET	443	64520	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.017318964 CET	64520	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.017349958 CET	443	64520	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.017855883 CET	64520	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.017863989 CET	443	64520	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.035043001 CET	443	64522	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.035182953 CET	443	64522	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.035304070 CET	64522	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.035343885 CET	64522	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.035362005 CET	443	64522	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.035372972 CET	64522	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.035378933 CET	443	64522	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.038100958 CET	64527	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.038132906 CET	443	64527	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.038223982 CET	64527	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.038391113 CET	64527	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.038403988 CET	443	64527	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.128572941 CET	443	64520	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.128623962 CET	443	64520	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.128835917 CET	64520	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.128914118 CET	64520	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.128935099 CET	443	64520	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.128947020 CET	64520	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.128952026 CET	443	64520	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.131486893 CET	443	64523	142.250.186.132	192.168.2.4
Nov 20, 2024 03:11:31.131607056 CET	64528	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.131659985 CET	443	64528	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.131921053 CET	64523	443	192.168.2.4	142.250.186.132
Nov 20, 2024 03:11:31.131953001 CET	443	64523	142.250.186.132	192.168.2.4
Nov 20, 2024 03:11:31.131963968 CET	64528	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.132137060 CET	64528	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.132167101 CET	443	64528	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.132437944 CET	443	64523	142.250.186.132	192.168.2.4
Nov 20, 2024 03:11:31.132951021 CET	64523	443	192.168.2.4	142.250.186.132
Nov 20, 2024 03:11:31.133039951 CET	443	64523	142.250.186.132	192.168.2.4
Nov 20, 2024 03:11:31.181658983 CET	64523	443	192.168.2.4	142.250.186.132
Nov 20, 2024 03:11:31.454222918 CET	443	64524	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.454904079 CET	64524	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.454941034 CET	443	64524	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.455545902 CET	64524	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.455559015 CET	443	64524	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.531488895 CET	443	64525	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.532118082 CET	64525	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.532139063 CET	443	64525	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.532715082 CET	64525	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.532721043 CET	443	64525	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.555869102 CET	443	64524	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.555897951 CET	443	64524	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.555980921 CET	64524	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.556013107 CET	443	64524	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.556098938 CET	443	64524	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.556313992 CET	64524	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.556349039 CET	443	64524	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.556364059 CET	64524	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.556372881 CET	443	64524	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.556415081 CET	64524	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.556421041 CET	443	64524	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.559958935 CET	64529	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.559999943 CET	443	64529	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.560090065 CET	64529	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.560292006 CET	64529	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.560306072 CET	443	64529	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.632466078 CET	443	64525	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.632641077 CET	443	64525	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.632854939 CET	64525	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.634649038 CET	64525	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.634649038 CET	64525	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.634676933 CET	443	64525	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.634692907 CET	443	64525	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.635405064 CET	443	64526	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.636240959 CET	64530	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.636312008 CET	443	64530	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.636687994 CET	64526	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.636737108 CET	443	64526	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.636740923 CET	64530	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.636950016 CET	64530	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.636986017 CET	443	64530	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.637262106 CET	64526	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.637271881 CET	443	64526	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.692414045 CET	443	64527	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.692925930 CET	64527	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.692967892 CET	443	64527	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.693428993 CET	64527	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.693440914 CET	443	64527	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.771122932 CET	443	64526	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.771286011 CET	443	64526	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.771476984 CET	64526	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.771537066 CET	64526	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.771568060 CET	443	64526	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.771605015 CET	64526	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.771612883 CET	443	64526	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.774589062 CET	64531	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.774632931 CET	443	64531	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.774717093 CET	64531	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.774887085 CET	64531	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.774902105 CET	443	64531	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.793771029 CET	443	64527	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.793834925 CET	443	64527	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.793968916 CET	443	64527	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.794006109 CET	64527	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.794059992 CET	64527	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.794117928 CET	64527	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.794141054 CET	443	64527	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.794157982 CET	64527	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.794164896 CET	443	64527	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.796710968 CET	64532	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.796749115 CET	443	64532	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.796832085 CET	64532	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.797005892 CET	64532	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.797029972 CET	443	64532	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.817286015 CET	443	64528	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.817749023 CET	64528	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.817774057 CET	443	64528	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.818336964 CET	64528	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.818350077 CET	443	64528	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.965712070 CET	443	64528	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.965742111 CET	443	64528	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.965831995 CET	64528	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.965867996 CET	443	64528	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.965939999 CET	64528	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.966141939 CET	443	64528	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.966155052 CET	64528	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.966167927 CET	443	64528	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.966196060 CET	64528	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.966209888 CET	443	64528	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.969708920 CET	64533	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.969800949 CET	443	64533	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:31.969907999 CET	64533	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.970105886 CET	64533	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:31.970138073 CET	443	64533	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.236159086 CET	443	64529	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.236809015 CET	64529	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:32.236836910 CET	443	64529	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.237421989 CET	64529	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:32.237435102 CET	443	64529	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.282646894 CET	443	64530	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.283247948 CET	64530	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:32.283271074 CET	443	64530	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.283694983 CET	64530	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:32.283699989 CET	443	64530	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.339929104 CET	443	64529	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.339960098 CET	443	64529	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.340156078 CET	64529	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:32.340178967 CET	443	64529	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.340357065 CET	443	64529	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.340415955 CET	64529	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:32.340596914 CET	64529	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:32.340610981 CET	443	64529	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.340639114 CET	64529	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:32.340645075 CET	443	64529	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.344052076 CET	64534	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:32.344105005 CET	443	64534	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.344208002 CET	64534	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:32.344398022 CET	64534	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:32.344413042 CET	443	64534	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.383162975 CET	443	64530	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.384885073 CET	443	64530	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.384975910 CET	64530	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:32.385060072 CET	64530	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:32.385097980 CET	443	64530	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.385124922 CET	64530	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:32.385142088 CET	443	64530	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.388355017 CET	64535	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:32.388398886 CET	443	64535	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.388488054 CET	64535	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:32.388715029 CET	64535	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:32.388730049 CET	443	64535	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.411088943 CET	443	64531	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.411551952 CET	64531	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:32.411567926 CET	443	64531	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.411995888 CET	64531	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:32.411998987 CET	443	64531	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.442953110 CET	443	64532	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.443336010 CET	64532	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:32.443346024 CET	443	64532	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.443667889 CET	64532	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:32.443671942 CET	443	64532	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.512748957 CET	443	64531	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.512928009 CET	443	64531	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.513011932 CET	64531	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:32.513145924 CET	64531	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:32.513153076 CET	443	64531	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.513164043 CET	64531	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:32.513168097 CET	443	64531	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.516401052 CET	64536	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:32.516444921 CET	443	64536	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.516544104 CET	64536	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:32.516756058 CET	64536	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:32.516772985 CET	443	64536	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.542543888 CET	443	64532	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.542687893 CET	443	64532	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.542754889 CET	64532	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:32.542865992 CET	64532	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:32.542876959 CET	443	64532	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.542886972 CET	64532	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:32.542892933 CET	443	64532	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.545450926 CET	64537	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:32.545533895 CET	443	64537	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.545633078 CET	64537	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:32.545850039 CET	64537	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:32.545882940 CET	443	64537	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.986057997 CET	443	64534	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.986602068 CET	64534	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:32.986629963 CET	443	64534	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:32.987334013 CET	64534	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:32.987343073 CET	443	64534	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.056543112 CET	443	64535	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.057306051 CET	64535	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.057390928 CET	443	64535	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.058012962 CET	64535	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.058026075 CET	443	64535	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.084816933 CET	443	64534	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.084955931 CET	443	64534	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.085026026 CET	64534	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.085117102 CET	64534	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.085135937 CET	443	64534	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.085150957 CET	64534	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.085159063 CET	443	64534	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.087853909 CET	64538	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.087903023 CET	443	64538	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.087985039 CET	64538	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.088218927 CET	64538	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.088237047 CET	443	64538	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.158365011 CET	443	64535	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.158510923 CET	443	64535	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.158596992 CET	64535	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.158710957 CET	64535	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.158746004 CET	443	64535	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.158775091 CET	64535	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.158791065 CET	443	64535	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.161735058 CET	64539	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.161818981 CET	443	64539	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.161906004 CET	64539	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.162164927 CET	64539	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.162198067 CET	443	64539	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.172323942 CET	443	64536	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.172796011 CET	64536	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.172821045 CET	443	64536	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.173482895 CET	64536	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.173510075 CET	443	64536	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.202157974 CET	443	64537	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.202580929 CET	64537	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.202610970 CET	443	64537	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.203207970 CET	64537	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.203219891 CET	443	64537	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.273686886 CET	443	64536	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.273999929 CET	443	64536	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.274106026 CET	64536	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.274106026 CET	64536	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.274175882 CET	64536	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.274224043 CET	443	64536	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.278270960 CET	64540	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.278320074 CET	443	64540	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.278403044 CET	64540	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.278544903 CET	64540	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.278562069 CET	443	64540	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.302429914 CET	443	64537	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.303926945 CET	443	64537	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.304001093 CET	64537	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.304064989 CET	64537	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.304064989 CET	64537	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.304100990 CET	443	64537	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.304125071 CET	443	64537	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.306770086 CET	64541	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.306853056 CET	443	64541	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.306997061 CET	64541	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.307164907 CET	64541	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.307198048 CET	443	64541	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.542648077 CET	443	64533	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.543291092 CET	64533	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.543365002 CET	443	64533	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.543739080 CET	64533	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.543752909 CET	443	64533	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.669213057 CET	443	64533	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.669317007 CET	443	64533	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.669426918 CET	64533	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.669744968 CET	64533	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.669778109 CET	443	64533	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.669805050 CET	64533	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.669819117 CET	443	64533	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.673141956 CET	64542	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.673186064 CET	443	64542	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.673285961 CET	64542	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.673475027 CET	64542	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.673491955 CET	443	64542	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.748291969 CET	443	64538	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.748986959 CET	64538	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.749017954 CET	443	64538	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.749443054 CET	64538	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.749452114 CET	443	64538	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.839437008 CET	443	64539	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.840039015 CET	64539	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.840101004 CET	443	64539	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.840444088 CET	64539	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.840459108 CET	443	64539	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.846524954 CET	443	64538	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.846934080 CET	443	64538	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.847023964 CET	64538	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.847103119 CET	64538	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.847160101 CET	443	64538	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.847187996 CET	64538	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.847203970 CET	443	64538	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.850250959 CET	64543	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.850328922 CET	443	64543	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.850416899 CET	64543	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.850580931 CET	64543	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.850600004 CET	443	64543	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.937047005 CET	443	64540	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.937587976 CET	64540	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.937613964 CET	443	64540	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.938031912 CET	64540	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.938038111 CET	443	64540	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.943555117 CET	443	64539	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.943733931 CET	443	64539	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.943823099 CET	64539	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.943876982 CET	64539	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.943876982 CET	64539	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.943912029 CET	443	64539	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.943957090 CET	443	64539	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.946741104 CET	64544	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.946832895 CET	443	64544	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.946939945 CET	64544	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.947122097 CET	64544	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.947159052 CET	443	64544	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.977272987 CET	443	64541	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.977849007 CET	64541	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.977890015 CET	443	64541	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:33.978291988 CET	64541	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:33.978303909 CET	443	64541	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.036377907 CET	443	64540	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.036689043 CET	443	64540	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.036757946 CET	64540	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.036778927 CET	443	64540	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.036799908 CET	443	64540	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.036864996 CET	64540	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.036909103 CET	64540	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.036926031 CET	443	64540	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.036940098 CET	64540	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.036946058 CET	443	64540	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.040148020 CET	64545	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.040180922 CET	443	64545	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.040262938 CET	64545	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.040429115 CET	64545	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.040437937 CET	443	64545	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.079787016 CET	443	64541	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.079947948 CET	443	64541	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.080070019 CET	64541	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.080117941 CET	64541	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.080146074 CET	443	64541	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.080171108 CET	64541	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.080184937 CET	443	64541	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.083077908 CET	64546	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.083136082 CET	443	64546	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.083230019 CET	64546	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.083384037 CET	64546	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.083404064 CET	443	64546	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.348628998 CET	443	64542	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.349267006 CET	64542	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.349293947 CET	443	64542	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.349694967 CET	64542	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.349700928 CET	443	64542	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.459548950 CET	443	64542	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.459849119 CET	443	64542	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.459888935 CET	443	64542	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.459935904 CET	64542	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.459988117 CET	64542	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.460062027 CET	64542	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.460062027 CET	64542	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.460079908 CET	443	64542	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.460089922 CET	443	64542	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.463048935 CET	64547	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.463082075 CET	443	64547	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.463165998 CET	64547	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.463360071 CET	64547	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.463371992 CET	443	64547	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.536948919 CET	443	64543	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.537481070 CET	64543	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.537540913 CET	443	64543	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.537925005 CET	64543	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.537942886 CET	443	64543	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.593671083 CET	443	64544	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.594542980 CET	64544	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.594582081 CET	443	64544	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.595201969 CET	64544	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.595217943 CET	443	64544	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.641721010 CET	443	64543	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.641916990 CET	443	64543	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.642087936 CET	64543	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.642142057 CET	64543	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.642142057 CET	64543	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.642178059 CET	443	64543	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.642199039 CET	443	64543	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.645520926 CET	64548	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.645560026 CET	443	64548	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.645647049 CET	64548	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.645797014 CET	64548	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.645814896 CET	443	64548	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.715969086 CET	443	64545	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.716546059 CET	64545	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.716564894 CET	443	64545	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.717201948 CET	64545	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.717206955 CET	443	64545	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.738631964 CET	443	64544	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.738806009 CET	443	64544	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.738938093 CET	64544	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.739010096 CET	64544	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.739010096 CET	64544	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.739061117 CET	443	64544	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.739083052 CET	443	64544	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.742177010 CET	64549	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.742249012 CET	443	64549	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.742331028 CET	64549	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.742444992 CET	64549	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.742464066 CET	443	64549	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.763492107 CET	443	64546	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.763911009 CET	64546	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.763930082 CET	443	64546	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.764497042 CET	64546	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.764508009 CET	443	64546	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.822388887 CET	443	64545	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.822535038 CET	443	64545	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.822639942 CET	64545	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.822659969 CET	64545	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.822670937 CET	443	64545	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.822680950 CET	64545	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.822685003 CET	443	64545	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.825304031 CET	64550	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.825328112 CET	443	64550	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.825407028 CET	64550	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.825540066 CET	64550	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.825555086 CET	443	64550	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.868799925 CET	443	64546	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.868906021 CET	443	64546	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.868968010 CET	443	64546	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.869021893 CET	64546	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.869075060 CET	64546	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.869255066 CET	64546	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.869281054 CET	443	64546	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.869329929 CET	64546	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.869343042 CET	443	64546	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.872212887 CET	64551	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.872276068 CET	443	64551	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:34.872368097 CET	64551	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.872505903 CET	64551	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:34.872519970 CET	443	64551	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.169594049 CET	443	64547	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.170205116 CET	64547	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.170241117 CET	443	64547	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.170720100 CET	64547	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.170732975 CET	443	64547	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.274424076 CET	443	64547	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.274609089 CET	443	64547	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.274681091 CET	64547	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.274800062 CET	64547	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.274826050 CET	443	64547	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.274836063 CET	64547	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.274842978 CET	443	64547	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.277959108 CET	64552	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.278048038 CET	443	64552	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.278158903 CET	64552	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.278286934 CET	64552	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.278321028 CET	443	64552	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.325218916 CET	443	64548	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.328574896 CET	64548	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.328619003 CET	443	64548	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.329637051 CET	64548	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.329643965 CET	443	64548	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.405178070 CET	443	64549	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.406070948 CET	64549	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.406135082 CET	443	64549	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.406491995 CET	64549	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.406505108 CET	443	64549	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.472914934 CET	443	64550	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.473718882 CET	64550	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.473743916 CET	443	64550	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.474122047 CET	64550	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.474128962 CET	443	64550	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.505908966 CET	443	64549	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.506252050 CET	443	64549	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.506454945 CET	64549	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.506659031 CET	64549	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.506659031 CET	64549	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.506688118 CET	443	64549	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.506700993 CET	443	64549	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.510317087 CET	64553	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.510405064 CET	443	64553	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.510514021 CET	64553	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.510682106 CET	64553	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.510715008 CET	443	64553	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.518116951 CET	443	64548	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.518394947 CET	443	64548	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.518481016 CET	64548	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.518534899 CET	64548	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.518557072 CET	443	64548	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.518591881 CET	64548	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.518599987 CET	443	64548	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.520721912 CET	64554	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.520788908 CET	443	64554	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.520876884 CET	64554	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.521004915 CET	64554	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.521020889 CET	443	64554	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.559230089 CET	443	64551	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.559814930 CET	64551	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.559864044 CET	443	64551	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.560352087 CET	64551	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.560364962 CET	443	64551	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.574335098 CET	443	64550	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.574417114 CET	443	64550	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.574459076 CET	443	64550	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.574482918 CET	64550	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.574532032 CET	64550	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.574628115 CET	64550	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.574654102 CET	443	64550	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.574670076 CET	64550	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.574677944 CET	443	64550	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.577506065 CET	64555	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.577575922 CET	443	64555	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.577687025 CET	64555	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.577825069 CET	64555	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.577853918 CET	443	64555	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.668745041 CET	443	64551	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.668917894 CET	443	64551	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.669003963 CET	64551	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.669181108 CET	64551	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.669234991 CET	443	64551	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.669265032 CET	64551	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.669281960 CET	443	64551	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.673058033 CET	64556	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.673108101 CET	443	64556	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.673214912 CET	64556	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.673405886 CET	64556	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.673424959 CET	443	64556	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.914143085 CET	443	64552	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.914886951 CET	64552	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.914975882 CET	443	64552	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:35.915417910 CET	64552	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:35.915437937 CET	443	64552	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.013617992 CET	443	64552	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.013670921 CET	443	64552	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.013734102 CET	443	64552	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.013742924 CET	64552	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.013813972 CET	64552	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.014086962 CET	64552	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.014138937 CET	443	64552	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.014168978 CET	64552	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.014183998 CET	443	64552	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.017486095 CET	64557	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.017613888 CET	443	64557	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.017694950 CET	64557	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.017899990 CET	64557	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.017935038 CET	443	64557	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.158870935 CET	443	64553	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.159470081 CET	64553	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.159550905 CET	443	64553	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.160059929 CET	64553	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.160074949 CET	443	64553	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.166152000 CET	443	64554	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.166527987 CET	64554	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.166565895 CET	443	64554	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.166945934 CET	64554	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.166960955 CET	443	64554	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.252135992 CET	443	64555	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.252629042 CET	64555	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.252652884 CET	443	64555	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.253254890 CET	64555	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.253264904 CET	443	64555	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.260874033 CET	443	64553	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.261055946 CET	443	64553	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.261123896 CET	64553	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.261184931 CET	64553	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.261219978 CET	443	64553	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.261244059 CET	64553	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.261259079 CET	443	64553	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.264338970 CET	64558	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.264384985 CET	443	64558	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.264457941 CET	64558	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.264636040 CET	64558	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.264652014 CET	443	64558	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.265847921 CET	443	64554	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.266278028 CET	443	64554	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.266331911 CET	64554	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.266385078 CET	64554	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.266385078 CET	64554	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.266421080 CET	443	64554	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.266448021 CET	443	64554	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.268601894 CET	64559	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.268675089 CET	443	64559	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.268764973 CET	64559	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.268882990 CET	64559	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.268908978 CET	443	64559	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.314687014 CET	443	64556	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.315191031 CET	64556	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.315226078 CET	443	64556	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.315735102 CET	64556	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.315742970 CET	443	64556	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.355926991 CET	443	64555	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.356041908 CET	443	64555	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.356100082 CET	64555	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.356451035 CET	64555	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.356484890 CET	443	64555	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.356508017 CET	64555	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.356519938 CET	443	64555	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.359653950 CET	64560	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.359707117 CET	443	64560	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.359786987 CET	64560	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.359968901 CET	64560	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.359994888 CET	443	64560	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.417031050 CET	443	64556	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.417282104 CET	443	64556	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.417336941 CET	64556	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.417361975 CET	443	64556	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.417427063 CET	443	64556	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.417478085 CET	64556	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.417517900 CET	64556	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.417540073 CET	443	64556	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.417557001 CET	64556	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.417562962 CET	443	64556	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.420722008 CET	64561	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.420805931 CET	443	64561	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.420886993 CET	64561	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.421015978 CET	64561	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.421036959 CET	443	64561	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.667697906 CET	443	64557	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.668546915 CET	64557	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.668600082 CET	443	64557	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.669148922 CET	64557	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.669157982 CET	443	64557	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.773435116 CET	443	64557	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.773649931 CET	443	64557	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.773766994 CET	64557	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.773901939 CET	64557	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.773953915 CET	443	64557	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.773987055 CET	64557	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.774003983 CET	443	64557	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.778202057 CET	64562	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.778295994 CET	443	64562	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.778409958 CET	64562	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.778620005 CET	64562	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.778656960 CET	443	64562	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.915297031 CET	443	64559	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.916208982 CET	64559	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.916284084 CET	443	64559	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.916685104 CET	64559	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.916699886 CET	443	64559	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.942389965 CET	443	64558	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.942830086 CET	64558	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.942847967 CET	443	64558	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:36.943237066 CET	64558	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:36.943243027 CET	443	64558	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.015149117 CET	443	64559	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.015454054 CET	443	64559	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.015556097 CET	64559	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.015607119 CET	64559	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.015645027 CET	443	64559	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.015670061 CET	64559	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.015686035 CET	443	64559	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.018557072 CET	64563	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.018589973 CET	443	64563	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.018685102 CET	64563	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.018877983 CET	64563	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.018888950 CET	443	64563	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.045187950 CET	443	64558	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.045409918 CET	443	64558	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.045491934 CET	64558	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.045567036 CET	64558	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.045583963 CET	443	64558	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.045593977 CET	64558	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.045598984 CET	443	64558	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.048552990 CET	64564	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.048598051 CET	443	64564	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.048692942 CET	64564	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.048890114 CET	64564	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.048918009 CET	443	64564	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.072638988 CET	443	64561	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.075686932 CET	64561	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.075696945 CET	443	64561	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.076103926 CET	64561	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.076107025 CET	443	64561	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.173300982 CET	443	64561	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.173759937 CET	443	64561	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.173866987 CET	64561	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.173944950 CET	64561	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.173944950 CET	64561	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.173985958 CET	443	64561	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.174010992 CET	443	64561	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.176654100 CET	64565	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.176687002 CET	443	64565	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.176991940 CET	64565	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.176991940 CET	64565	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.177017927 CET	443	64565	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.421037912 CET	443	64562	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.423429012 CET	64562	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.423496962 CET	443	64562	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.423707008 CET	64562	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.423719883 CET	443	64562	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.522528887 CET	443	64562	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.522654057 CET	443	64562	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.522998095 CET	64562	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.522999048 CET	64562	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.522999048 CET	64562	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.525939941 CET	64566	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.526021004 CET	443	64566	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.526124954 CET	64566	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.526346922 CET	64566	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.526382923 CET	443	64566	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.663393974 CET	443	64563	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.663914919 CET	64563	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.663937092 CET	443	64563	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.664374113 CET	64563	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.664382935 CET	443	64563	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.683528900 CET	443	64560	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.683870077 CET	64560	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.683897972 CET	443	64560	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.684222937 CET	64560	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.684236050 CET	443	64560	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.716656923 CET	443	64564	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.717106104 CET	64564	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.717149973 CET	443	64564	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.717468977 CET	64564	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.717484951 CET	443	64564	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.769802094 CET	443	64563	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.770117044 CET	443	64563	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.770241976 CET	64563	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.770462990 CET	64563	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.770499945 CET	443	64563	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.770525932 CET	64563	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.770540953 CET	443	64563	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.773600101 CET	64567	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.773636103 CET	443	64567	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.773720026 CET	64567	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.773916006 CET	64567	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.773933887 CET	443	64567	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.782661915 CET	443	64560	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.783018112 CET	443	64560	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.783061981 CET	443	64560	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.783112049 CET	64560	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.783164024 CET	64560	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.785249949 CET	64560	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.785279989 CET	443	64560	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.785334110 CET	64560	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.785347939 CET	443	64560	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.788120031 CET	64568	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.788163900 CET	443	64568	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.788238049 CET	64568	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.788367033 CET	64568	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.788381100 CET	443	64568	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.818394899 CET	443	64564	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.818460941 CET	443	64564	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.818567991 CET	443	64564	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.818670988 CET	64564	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.818768978 CET	64564	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.818809032 CET	443	64564	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.818837881 CET	64564	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.818854094 CET	443	64564	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.821274042 CET	64569	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.821383953 CET	443	64569	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.821489096 CET	64569	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.821691990 CET	64569	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.821727037 CET	443	64569	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.837589025 CET	64562	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.837608099 CET	443	64562	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.851895094 CET	443	64565	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.852370024 CET	64565	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.852381945 CET	443	64565	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.852809906 CET	64565	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.852813959 CET	443	64565	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.955171108 CET	443	64565	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.955463886 CET	443	64565	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.955530882 CET	64565	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.955574989 CET	64565	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.955588102 CET	443	64565	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.955599070 CET	64565	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.955604076 CET	443	64565	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.958448887 CET	64570	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.958484888 CET	443	64570	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:37.958564043 CET	64570	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.958764076 CET	64570	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:37.958782911 CET	443	64570	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.201901913 CET	443	64566	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.202478886 CET	64566	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.202534914 CET	443	64566	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.203121901 CET	64566	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.203139067 CET	443	64566	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.347922087 CET	443	64566	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.348560095 CET	443	64566	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.348664045 CET	64566	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.348720074 CET	64566	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.348751068 CET	443	64566	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.348774910 CET	64566	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.348789930 CET	443	64566	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.351408958 CET	64571	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.351514101 CET	443	64571	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.351624966 CET	64571	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.351748943 CET	64571	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.351778030 CET	443	64571	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.442770958 CET	443	64568	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.443449974 CET	64568	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.443478107 CET	443	64568	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.443984032 CET	64568	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.443989992 CET	443	64568	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.518224001 CET	443	64567	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.518855095 CET	64567	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.518876076 CET	443	64567	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.519305944 CET	64567	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.519310951 CET	443	64567	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.521713018 CET	443	64569	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.522025108 CET	64569	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.522087097 CET	443	64569	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.522341967 CET	64569	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.522355080 CET	443	64569	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.541656971 CET	443	64568	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.541881084 CET	443	64568	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.541925907 CET	443	64568	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.541944027 CET	64568	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.542007923 CET	64568	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.542066097 CET	64568	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.542084932 CET	443	64568	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.542098045 CET	64568	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.542104959 CET	443	64568	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.545335054 CET	64572	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.545411110 CET	443	64572	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.545517921 CET	64572	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.545711040 CET	64572	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.545748949 CET	443	64572	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.622174978 CET	443	64567	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.622629881 CET	443	64567	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.622632980 CET	443	64569	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.622956991 CET	64567	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.622956991 CET	64567	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.622956991 CET	64567	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.622992039 CET	443	64569	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.623074055 CET	64569	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.623130083 CET	64569	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.623131037 CET	64569	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.623167038 CET	443	64569	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.623188972 CET	443	64569	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.625514984 CET	64573	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.625546932 CET	443	64573	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.625591993 CET	64574	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.625617981 CET	64573	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.625633955 CET	443	64574	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.625713110 CET	64574	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.625725985 CET	64573	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.625735998 CET	443	64573	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.625830889 CET	64574	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.625860929 CET	443	64574	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.670231104 CET	443	64570	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.670712948 CET	64570	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.670734882 CET	443	64570	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.671125889 CET	64570	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.671132088 CET	443	64570	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.776734114 CET	443	64570	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.781500101 CET	443	64570	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.781600952 CET	64570	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.781606913 CET	443	64570	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.781683922 CET	64570	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.781830072 CET	64570	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.781852007 CET	443	64570	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.781876087 CET	64570	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.781883001 CET	443	64570	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.785077095 CET	64575	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.785121918 CET	443	64575	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.785204887 CET	64575	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.785412073 CET	64575	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.785428047 CET	443	64575	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:38.931756973 CET	64567	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:38.931787968 CET	443	64567	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.014003992 CET	443	64571	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.014606953 CET	64571	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.014643908 CET	443	64571	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.015419006 CET	64571	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.015434980 CET	443	64571	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.119627953 CET	443	64571	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.119841099 CET	443	64571	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.119899988 CET	64571	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.120263100 CET	64571	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.120310068 CET	443	64571	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.124499083 CET	64576	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.124526978 CET	443	64576	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.124608994 CET	64576	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.124728918 CET	64576	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.124736071 CET	443	64576	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.208575010 CET	443	64572	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.209193945 CET	64572	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.209218025 CET	443	64572	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.209585905 CET	64572	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.209594965 CET	443	64572	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.274410009 CET	443	64574	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.275013924 CET	64574	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.275032997 CET	443	64574	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.275825024 CET	64574	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.275830984 CET	443	64574	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.278223038 CET	443	64573	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.278675079 CET	64573	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.278692007 CET	443	64573	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.278939962 CET	64573	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.278947115 CET	443	64573	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.318053961 CET	443	64572	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.318592072 CET	443	64572	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.318645954 CET	443	64572	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.318658113 CET	64572	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.318715096 CET	64572	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.318793058 CET	64572	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.318819046 CET	443	64572	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.318834066 CET	64572	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.318842888 CET	443	64572	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.322284937 CET	64577	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.322314024 CET	443	64577	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.322413921 CET	64577	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.323416948 CET	64577	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.323434114 CET	443	64577	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.531491041 CET	443	64574	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.531523943 CET	443	64573	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.531624079 CET	443	64573	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.531670094 CET	443	64574	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.531712055 CET	64573	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.531729937 CET	443	64573	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.531758070 CET	443	64573	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.531781912 CET	64574	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.531806946 CET	64573	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.531965017 CET	64574	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.532015085 CET	443	64574	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.532032967 CET	64573	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.532037973 CET	64574	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.532047033 CET	443	64573	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.532053947 CET	443	64574	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.532058954 CET	64573	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.532066107 CET	443	64573	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.534107924 CET	443	64575	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.534953117 CET	64578	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.534976006 CET	443	64578	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.535065889 CET	64578	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.535094976 CET	64575	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.535106897 CET	443	64575	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.535160065 CET	64579	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.535207033 CET	443	64579	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.535262108 CET	64578	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.535271883 CET	443	64578	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.535306931 CET	64579	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.535381079 CET	64579	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.535401106 CET	443	64579	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.535875082 CET	64575	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.535880089 CET	443	64575	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.696223974 CET	443	64575	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.698465109 CET	443	64575	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.698534012 CET	64575	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.698580027 CET	64575	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.698590994 CET	443	64575	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.698601961 CET	64575	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.698606014 CET	443	64575	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.702193022 CET	64580	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.702297926 CET	443	64580	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.702387094 CET	64580	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.702613115 CET	64580	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.702642918 CET	443	64580	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.799664021 CET	443	64576	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.800195932 CET	64576	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.800205946 CET	443	64576	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.800596952 CET	64576	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.800601006 CET	443	64576	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.902101040 CET	443	64576	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.902339935 CET	443	64576	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.902379990 CET	443	64576	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.902405024 CET	64576	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.902466059 CET	64576	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.902568102 CET	64576	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.902579069 CET	443	64576	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.902587891 CET	64576	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.902594090 CET	443	64576	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.905795097 CET	64581	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.905838013 CET	443	64581	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.905916929 CET	64581	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.906161070 CET	64581	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.906198978 CET	443	64581	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.986974955 CET	443	64577	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.987596989 CET	64577	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.987684011 CET	443	64577	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:39.987898111 CET	64577	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:39.987912893 CET	443	64577	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.098628998 CET	443	64577	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.098733902 CET	443	64577	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.099009037 CET	64577	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.099087000 CET	64577	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.099087000 CET	64577	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.099126101 CET	443	64577	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.099150896 CET	443	64577	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.102240086 CET	64582	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.102324009 CET	443	64582	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.102416039 CET	64582	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.102591038 CET	64582	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.102624893 CET	443	64582	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.215562105 CET	443	64579	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.216195107 CET	64579	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.216244936 CET	443	64579	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.216622114 CET	64579	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.216633081 CET	443	64579	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.232709885 CET	443	64578	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.233032942 CET	64578	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.233052015 CET	443	64578	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.233338118 CET	64578	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.233344078 CET	443	64578	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.314026117 CET	443	64579	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.314270020 CET	443	64579	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.314348936 CET	64579	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.314446926 CET	64579	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.314446926 CET	64579	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.314490080 CET	443	64579	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.314515114 CET	443	64579	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.317665100 CET	64583	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.317694902 CET	443	64583	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.317778111 CET	64583	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.317935944 CET	64583	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.317946911 CET	443	64583	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.334798098 CET	443	64578	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.335124969 CET	443	64578	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.335189104 CET	64578	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.335222006 CET	64578	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.335242033 CET	443	64578	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.335254908 CET	64578	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.335262060 CET	443	64578	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.337399960 CET	443	64580	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.337779045 CET	64584	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.337811947 CET	443	64584	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.337899923 CET	64584	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.338033915 CET	64584	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.338048935 CET	443	64584	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.338237047 CET	64580	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.338314056 CET	443	64580	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.338960886 CET	64580	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.338978052 CET	443	64580	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.437585115 CET	443	64580	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.438159943 CET	443	64580	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.438191891 CET	443	64580	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.438239098 CET	64580	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.438283920 CET	64580	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.438349009 CET	64580	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.438388109 CET	443	64580	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.438415051 CET	64580	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.438431025 CET	443	64580	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.441142082 CET	64585	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.441183090 CET	443	64585	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.441272020 CET	64585	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.441435099 CET	64585	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.441450119 CET	443	64585	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.539496899 CET	443	64581	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.540213108 CET	64581	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.540230989 CET	443	64581	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.540678024 CET	64581	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.540683985 CET	443	64581	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.638237000 CET	443	64581	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.638650894 CET	443	64581	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.638823986 CET	64581	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.638823986 CET	64581	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.638823986 CET	64581	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.641886950 CET	64586	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.641928911 CET	443	64586	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.642015934 CET	64586	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.642183065 CET	64586	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.642196894 CET	443	64586	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.752474070 CET	443	64582	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.752809048 CET	64582	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.752868891 CET	443	64582	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.753180027 CET	64582	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.753195047 CET	443	64582	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.861903906 CET	443	64582	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.862375975 CET	443	64582	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.862420082 CET	443	64582	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.862520933 CET	64582	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.862567902 CET	64582	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.862768888 CET	64582	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.862807035 CET	443	64582	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.862833977 CET	64582	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.862848043 CET	443	64582	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.865495920 CET	64587	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.865539074 CET	443	64587	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.865725040 CET	64587	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.865783930 CET	64587	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.865792990 CET	443	64587	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.947377920 CET	64581	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.947402000 CET	443	64581	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.978873014 CET	443	64584	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.979355097 CET	64584	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.979372978 CET	443	64584	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.980047941 CET	64584	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.980055094 CET	443	64584	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.983769894 CET	443	64583	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.984318972 CET	64583	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.984337091 CET	443	64583	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:40.984899044 CET	64583	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:40.984905005 CET	443	64583	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.040803909 CET	443	64523	142.250.186.132	192.168.2.4
Nov 20, 2024 03:11:41.040930033 CET	443	64523	142.250.186.132	192.168.2.4
Nov 20, 2024 03:11:41.040983915 CET	64523	443	192.168.2.4	142.250.186.132
Nov 20, 2024 03:11:41.075927019 CET	443	64585	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.076342106 CET	64585	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.076354027 CET	443	64585	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.076968908 CET	64585	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.076973915 CET	443	64585	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.080600023 CET	443	64584	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.080746889 CET	443	64584	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.080799103 CET	64584	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.080828905 CET	64584	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.080843925 CET	443	64584	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.080852985 CET	64584	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.080857992 CET	443	64584	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.083666086 CET	64588	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.083751917 CET	443	64588	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.083837986 CET	64588	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.084089994 CET	64588	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.084125996 CET	443	64588	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.085855007 CET	443	64583	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.086222887 CET	443	64583	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.086292982 CET	64583	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.086318970 CET	64583	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.086332083 CET	443	64583	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.086342096 CET	64583	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.086347103 CET	443	64583	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.088617086 CET	64589	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.088696003 CET	443	64589	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.088781118 CET	64589	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.088861942 CET	64589	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.088881969 CET	443	64589	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.177217960 CET	443	64585	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.177335024 CET	443	64585	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.177392006 CET	64585	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.177546978 CET	64585	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.177558899 CET	443	64585	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.177601099 CET	64585	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.177606106 CET	443	64585	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.180205107 CET	64590	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.180243969 CET	443	64590	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.180327892 CET	64590	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.180422068 CET	64590	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.180444002 CET	443	64590	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.277648926 CET	443	64586	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.278114080 CET	64586	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.278131962 CET	443	64586	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.278563023 CET	64586	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.278568983 CET	443	64586	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.377435923 CET	443	64586	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.377851009 CET	443	64586	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.377892971 CET	443	64586	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.377903938 CET	64586	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.377944946 CET	64586	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.377999067 CET	64586	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.378012896 CET	443	64586	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.378024101 CET	64586	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.378030062 CET	443	64586	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.381098986 CET	64591	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.381148100 CET	443	64591	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.381226063 CET	64591	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.381429911 CET	64591	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.381460905 CET	443	64591	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.542321920 CET	443	64587	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.542893887 CET	64587	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.542924881 CET	443	64587	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.543230057 CET	64587	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.543236017 CET	443	64587	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.650135040 CET	443	64587	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.650645018 CET	443	64587	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.650717974 CET	64587	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.650779963 CET	64587	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.650779963 CET	64587	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.650816917 CET	443	64587	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.650840044 CET	443	64587	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.653072119 CET	64592	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.653117895 CET	443	64592	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.653218985 CET	64592	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.653326035 CET	64592	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.653341055 CET	443	64592	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.729543924 CET	443	64589	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.730129957 CET	64589	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.730207920 CET	443	64589	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.730555058 CET	64589	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.730571032 CET	443	64589	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.748920918 CET	443	64588	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.749358892 CET	64588	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.749381065 CET	443	64588	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.749737978 CET	64588	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.749742031 CET	443	64588	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.821202993 CET	443	64590	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.821599007 CET	64590	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.821624994 CET	443	64590	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.821911097 CET	64590	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.821922064 CET	443	64590	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.830337048 CET	443	64589	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.830626965 CET	443	64589	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.830714941 CET	64589	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.830714941 CET	64589	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.830769062 CET	64589	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.830804110 CET	443	64589	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.834574938 CET	64593	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.834614992 CET	443	64593	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.834693909 CET	64593	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.834830999 CET	64593	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.834845066 CET	443	64593	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.853704929 CET	443	64588	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.853766918 CET	443	64588	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.853838921 CET	64588	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.853866100 CET	443	64588	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.853897095 CET	443	64588	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.853965044 CET	64588	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.854017973 CET	64588	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.854017973 CET	64588	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.854053020 CET	443	64588	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.854089975 CET	443	64588	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.857201099 CET	64594	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.857245922 CET	443	64594	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.857332945 CET	64594	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.857502937 CET	64594	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.857544899 CET	443	64594	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.923305035 CET	443	64590	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.923388004 CET	443	64590	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.923443079 CET	64590	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.923763037 CET	64590	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.923787117 CET	443	64590	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.923810959 CET	64590	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.923825979 CET	443	64590	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.926768064 CET	64595	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.926804066 CET	443	64595	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:41.926883936 CET	64595	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.927284002 CET	64595	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:41.927303076 CET	443	64595	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.019634008 CET	443	64591	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.020031929 CET	64591	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.020113945 CET	443	64591	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.020426035 CET	64591	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.020438910 CET	443	64591	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.119123936 CET	443	64591	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.119426012 CET	443	64591	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.119497061 CET	64591	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.119945049 CET	64591	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.119945049 CET	64591	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.119991064 CET	443	64591	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.120018005 CET	443	64591	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.122550011 CET	64596	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.122596979 CET	443	64596	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.122678995 CET	64596	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.122879982 CET	64596	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.122910023 CET	443	64596	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.318320990 CET	443	64592	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.318814993 CET	64592	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.318852901 CET	443	64592	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.319263935 CET	64592	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.319281101 CET	443	64592	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.437439919 CET	443	64592	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.437756062 CET	443	64592	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.437849045 CET	64592	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.438009977 CET	64592	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.438040972 CET	443	64592	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.438066006 CET	64592	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.438081026 CET	443	64592	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.440399885 CET	64597	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.440485954 CET	443	64597	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.440576077 CET	64597	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.440854073 CET	64597	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.440890074 CET	443	64597	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.496671915 CET	443	64594	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.497051954 CET	64594	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.497083902 CET	443	64594	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.497524977 CET	64594	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.497536898 CET	443	64594	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.519402981 CET	443	64593	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.521301031 CET	64593	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.521322966 CET	443	64593	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.521678925 CET	64593	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.521684885 CET	443	64593	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.575128078 CET	443	64595	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.575624943 CET	64595	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.575650930 CET	443	64595	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.576248884 CET	64595	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.576255083 CET	443	64595	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.598983049 CET	443	64594	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.599495888 CET	443	64594	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.599576950 CET	64594	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.599809885 CET	64594	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.599809885 CET	64594	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.599833012 CET	443	64594	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.599855900 CET	443	64594	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.602808952 CET	64598	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.602894068 CET	443	64598	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.602998018 CET	64598	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.603112936 CET	64598	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.603132963 CET	443	64598	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.627053022 CET	443	64593	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.627475023 CET	443	64593	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.627551079 CET	64593	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.627574921 CET	64593	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.627590895 CET	443	64593	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.627604961 CET	64593	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.627610922 CET	443	64593	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.629714012 CET	64599	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.629797935 CET	443	64599	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.629882097 CET	64599	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.629967928 CET	64599	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.629993916 CET	443	64599	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.678806067 CET	443	64595	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.678874969 CET	443	64595	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.679023027 CET	64595	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.679191113 CET	64595	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.679191113 CET	64595	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.679198027 CET	443	64595	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.679208994 CET	443	64595	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.681195974 CET	64600	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.681267977 CET	443	64600	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.681487083 CET	64600	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.681487083 CET	64600	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.681559086 CET	443	64600	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.784466982 CET	443	64596	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.784977913 CET	64596	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.785012960 CET	443	64596	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.785458088 CET	64596	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.785471916 CET	443	64596	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.887214899 CET	443	64596	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.887355089 CET	443	64596	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.887402058 CET	443	64596	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.887558937 CET	64596	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.888758898 CET	64596	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.888758898 CET	64596	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.888792992 CET	443	64596	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.888808966 CET	443	64596	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.890221119 CET	64601	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.890249014 CET	443	64601	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.890337944 CET	64601	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.890453100 CET	64601	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:42.890464067 CET	443	64601	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:42.902265072 CET	64523	443	192.168.2.4	142.250.186.132
Nov 20, 2024 03:11:42.902287960 CET	443	64523	142.250.186.132	192.168.2.4
Nov 20, 2024 03:11:43.081059933 CET	443	64597	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.081594944 CET	64597	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.081612110 CET	443	64597	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.082148075 CET	64597	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.082151890 CET	443	64597	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.381342888 CET	443	64597	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.381417990 CET	443	64597	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.381478071 CET	64597	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.381829977 CET	64597	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.381871939 CET	443	64597	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.381901026 CET	64597	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.381917953 CET	443	64597	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.384802103 CET	64602	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.384893894 CET	443	64602	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.384988070 CET	64602	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.385149002 CET	64602	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.385174036 CET	443	64602	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.388940096 CET	443	64600	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.389283895 CET	64600	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.389317036 CET	443	64600	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.389702082 CET	64600	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.389713049 CET	443	64600	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.393099070 CET	443	64598	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.393465042 CET	443	64599	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.393472910 CET	64598	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.393548965 CET	443	64598	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.393760920 CET	64599	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.393779039 CET	443	64599	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.394229889 CET	64598	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.394243956 CET	443	64598	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.394316912 CET	64599	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.394328117 CET	443	64599	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.492065907 CET	443	64600	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.492085934 CET	443	64600	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.492149115 CET	64600	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.492196083 CET	443	64600	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.492332935 CET	64600	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.492356062 CET	443	64600	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.492378950 CET	443	64600	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.492383957 CET	64600	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.492413044 CET	443	64600	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.495374918 CET	64603	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.495405912 CET	443	64603	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.495537043 CET	64603	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.495692968 CET	64603	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.495708942 CET	443	64603	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.496855974 CET	443	64599	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.497215986 CET	443	64599	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.497312069 CET	64599	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.497354984 CET	64599	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.497375011 CET	443	64599	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.497420073 CET	64599	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.497430086 CET	443	64599	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.497665882 CET	443	64598	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.497736931 CET	443	64598	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.497802019 CET	64598	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.497891903 CET	64598	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.497931004 CET	443	64598	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.497957945 CET	64598	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.497972965 CET	443	64598	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.499993086 CET	64604	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.500022888 CET	443	64604	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.500077963 CET	64604	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.500324965 CET	64604	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.500339031 CET	443	64604	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.500411987 CET	64605	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.500482082 CET	443	64605	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.500556946 CET	64605	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.500646114 CET	64605	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.500668049 CET	443	64605	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.569715977 CET	443	64601	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.570157051 CET	64601	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.570167065 CET	443	64601	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.570555925 CET	64601	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.570560932 CET	443	64601	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.676753998 CET	443	64601	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.677499056 CET	443	64601	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.677548885 CET	443	64601	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.677561998 CET	64601	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.677609921 CET	64601	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.677685976 CET	64601	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.677685976 CET	64601	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.677700043 CET	443	64601	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.677711010 CET	443	64601	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.680402994 CET	64606	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.680449963 CET	443	64606	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:43.680516005 CET	64606	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.680630922 CET	64606	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:43.680648088 CET	443	64606	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:44.033097982 CET	443	64602	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:44.033844948 CET	64602	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:44.033930063 CET	443	64602	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:44.034343958 CET	64602	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:44.034364939 CET	443	64602	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:44.131588936 CET	443	64602	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:44.131774902 CET	443	64602	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:44.131819963 CET	443	64602	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:44.131844997 CET	64602	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:44.131896973 CET	64602	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:44.132077932 CET	64602	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:44.132117033 CET	443	64602	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:44.132143021 CET	64602	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:44.132158995 CET	443	64602	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:44.135098934 CET	64607	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:44.135183096 CET	443	64607	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:44.135279894 CET	64607	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:44.135436058 CET	64607	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:44.135472059 CET	443	64607	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:44.136666059 CET	443	64605	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:44.136996984 CET	64605	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:44.137015104 CET	443	64605	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:44.137542009 CET	64605	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:44.137552977 CET	443	64605	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:44.143030882 CET	443	64603	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:44.143335104 CET	64603	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:44.143356085 CET	443	64603	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:44.143898010 CET	64603	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:44.143903971 CET	443	64603	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:44.186975956 CET	443	64604	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:44.187289953 CET	64604	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:44.187304974 CET	443	64604	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:44.187794924 CET	64604	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:44.187798977 CET	443	64604	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:44.245508909 CET	443	64603	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:44.245620966 CET	443	64603	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:44.245829105 CET	64603	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:44.245829105 CET	64603	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:44.245829105 CET	64603	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:44.247773886 CET	64608	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:44.247850895 CET	443	64608	13.107.246.45	192.168.2.4
Nov 20, 2024 03:11:44.247925997 CET	64608	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:44.248023987 CET	64608	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:11:44.248044968 CET	443	64608	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 20, 2024 03:10:26.127118111 CET	53	57373	1.1.1.1	192.168.2.4
Nov 20, 2024 03:10:26.128511906 CET	53	51220	1.1.1.1	192.168.2.4
Nov 20, 2024 03:10:27.170372963 CET	53	49229	1.1.1.1	192.168.2.4
Nov 20, 2024 03:10:27.447125912 CET	58180	53	192.168.2.4	1.1.1.1
Nov 20, 2024 03:10:27.447659969 CET	60289	53	192.168.2.4	1.1.1.1
Nov 20, 2024 03:10:27.458806038 CET	53	58180	1.1.1.1	192.168.2.4
Nov 20, 2024 03:10:27.460983038 CET	53	60289	1.1.1.1	192.168.2.4
Nov 20, 2024 03:10:28.381062984 CET	61922	53	192.168.2.4	1.1.1.1
Nov 20, 2024 03:10:28.381294966 CET	61564	53	192.168.2.4	1.1.1.1
Nov 20, 2024 03:10:28.392791986 CET	53	61564	1.1.1.1	192.168.2.4
Nov 20, 2024 03:10:28.393552065 CET	53	61922	1.1.1.1	192.168.2.4
Nov 20, 2024 03:10:30.416991949 CET	56629	53	192.168.2.4	1.1.1.1
Nov 20, 2024 03:10:30.417098045 CET	58184	53	192.168.2.4	1.1.1.1
Nov 20, 2024 03:10:30.423823118 CET	53	58184	1.1.1.1	192.168.2.4
Nov 20, 2024 03:10:30.423908949 CET	53	56629	1.1.1.1	192.168.2.4
Nov 20, 2024 03:10:40.281074047 CET	138	138	192.168.2.4	192.168.2.255
Nov 20, 2024 03:10:41.266438961 CET	53	50668	1.1.1.1	192.168.2.4
Nov 20, 2024 03:10:44.220304966 CET	53	64404	1.1.1.1	192.168.2.4
Nov 20, 2024 03:11:03.003190041 CET	53	63547	1.1.1.1	192.168.2.4
Nov 20, 2024 03:11:25.488579988 CET	53	60838	1.1.1.1	192.168.2.4
Nov 20, 2024 03:11:25.850567102 CET	53	53598	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 20, 2024 03:10:27.447125912 CET	192.168.2.4	1.1.1.1	0x224a	Standard query (0)	prettylearning.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:10:27.447659969 CET	192.168.2.4	1.1.1.1	0xcca8	Standard query (0)	prettylearning.com	65	IN (0x0001)	false
Nov 20, 2024 03:10:28.381062984 CET	192.168.2.4	1.1.1.1	0xf0da	Standard query (0)	prettylearning.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:10:28.381294966 CET	192.168.2.4	1.1.1.1	0x14f	Standard query (0)	prettylearning.com	65	IN (0x0001)	false
Nov 20, 2024 03:10:30.416991949 CET	192.168.2.4	1.1.1.1	0xea6a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:10:30.417098045 CET	192.168.2.4	1.1.1.1	0xb401	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Nov 20, 2024 03:10:27.458806038 CET	1.1.1.1	192.168.2.4	0x224a	No error (0)	prettylearning.com	104.18.24.111	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:10:27.458806038 CET	1.1.1.1	192.168.2.4	0x224a	No error (0)	prettylearning.com	104.18.25.111	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:10:28.393552065 CET	1.1.1.1	192.168.2.4	0xf0da	No error (0)	prettylearning.com	104.18.25.111	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:10:28.393552065 CET	1.1.1.1	192.168.2.4	0xf0da	No error (0)	prettylearning.com	104.18.24.111	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:10:30.423823118 CET	1.1.1.1	192.168.2.4	0xb401	No error (0)	www.google.com		65	IN (0x0001)	false
Nov 20, 2024 03:10:30.423908949 CET	1.1.1.1	192.168.2.4	0xea6a	No error (0)	www.google.com	142.250.186.132	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

prettylearning.com

https:

fs.microsoft.com

slscr.update.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	104.18.24.111	443	3568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:10:27 UTC	661	OUT	GET / HTTP/1.1 Host: prettylearning.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 02:10:28 UTC	562	IN	HTTP/1.1 404 Not Found Date: Wed, 20 Nov 2024 02:10:28 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close expires: Wed, 20 Nov 2024 03:10:28 GMT strict-transport-security: max-age=15724800; preload timing-allow-origin: * vary: Accept-Encoding x-buildname: hoothoot x-buildnumber: 1528792020 x-content-type-options: nosniff x-datacenter: gce-us-east1 x-hostname: fen-hoothoot-us-east1-chmc via: 1.1 google alt-svc: h3=":443"; ma=86400 CF-Cache-Status: MISS Server: cloudflare CF-RAY: 8e54e75d09240f46-EWR
2024-11-20 02:10:28 UTC	807	IN	Data Raw: 31 34 64 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 68 74 6d 6c 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 0a 20 20 20 20 62 6f 64 79 7b 70 61 64 64 69 6e 67 3a 32 30 70 78 3b 63 6f 6c 6f 72 3a 23 33 62 34 37 36 62 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 38 70 78 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 0a 20 20 20 20 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 Data Ascii: 14dc<!doctype html><html><head> <title>404 Not Found</title> <style> html{margin:0;padding:0;background:#fff;font-family:Arial;height:100%} body{padding:20px;color:#3b476b;line-height:18px;height:100%} h2{font-size:1.5em;margin-bottom:3
2024-11-20 02:10:28 UTC	1369	IN	Data Raw: 65 3d 22 63 68 65 63 6b 62 6f 78 22 20 2f 3e 0a 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 64 63 22 3e 44 65 74 61 69 6c 73 3c 2f 6c 61 62 65 6c 3e 0a 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 63 22 3e 48 6f 73 74 6e 61 6d 65 3a 20 66 65 6e 2d 68 6f 6f 74 68 6f 6f 74 2d 75 73 2d 65 61 73 74 31 2d 63 68 6d 63 3c 62 72 20 2f 3e 44 61 74 61 63 65 6e 74 65 72 3a 20 67 63 65 2d 75 73 2d 65 61 73 74 31 3c 2f 70 3e 0a 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 73 65 63 74 69 6f 6e 20 73 74 79 6c 65 3d 22 74 6f 70 3a 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 22 3e 0a 20 20 20 20 3c 70 3e 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 Data Ascii: e="checkbox" /> <label for="dc">Details</label> <p class="c">Hostname: fen-hoothoot-us-east1-chmc<br />Datacenter: gce-us-east1</p> </div> <section style="top:50%;transform:translateY(-50%);position:relative;"> <p><svg xmlns="http://www.w3
2024-11-20 02:10:28 UTC	1369	IN	Data Raw: 6c 38 20 32 76 36 30 61 39 33 20 39 33 20 30 20 30 20 30 2d 32 30 2d 33 63 2d 31 35 20 30 2d 32 37 20 33 2d 33 36 20 38 61 36 35 20 36 35 20 30 20 30 20 30 2d 33 32 20 34 33 6c 2d 33 20 31 39 76 31 34 30 68 2d 36 35 56 32 34 30 7a 6d 33 34 34 20 32 32 38 68 2d 32 63 2d 36 20 31 32 2d 31 37 20 32 31 2d 33 31 20 32 39 2d 31 35 20 37 2d 33 31 20 31 31 2d 35 30 20 31 31 2d 31 30 20 30 2d 32 31 2d 31 2d 33 33 2d 34 2d 31 31 2d 33 2d 32 32 2d 37 2d 33 31 2d 31 34 61 37 32 20 37 32 20 30 20 30 20 31 2d 33 34 2d 36 34 63 30 2d 31 39 20 36 2d 33 35 20 31 37 2d 34 36 20 31 31 2d 31 32 20 32 35 2d 32 31 20 34 32 2d 32 37 20 31 38 2d 36 20 33 37 2d 31 30 20 35 38 2d 31 32 6c 36 33 2d 33 76 2d 37 63 30 2d 31 36 2d 36 2d 32 38 2d 31 38 2d 33 36 73 2d 32 36 2d 31 32 2d Data Ascii: l8 2v60a93 93 0 0 0-20-3c-15 0-27 3-36 8a65 65 0 0 0-32 43l-3 19v140h-65V240zm344 228h-2c-6 12-17 21-31 29-15 7-31 11-50 11-10 0-21-1-33-4-11-3-22-7-31-14a72 72 0 0 1-34-64c0-19 6-35 17-46 11-12 25-21 42-27 18-6 37-10 58-12l63-3v-7c0-16-6-28-18-36s-26-12-
2024-11-20 02:10:28 UTC	1369	IN	Data Raw: 67 69 74 61 6c 20 4d 69 6c 6c 65 6e 6e 69 75 6d 20 43 6f 70 79 72 69 67 68 74 20 41 63 74 20 61 6e 64 20 72 65 6c 61 74 65 64 20 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6c 61 77 73 2c 20 65 6e 61 62 6c 69 6e 67 20 70 72 69 76 61 63 79 20 63 6f 6e 73 65 6e 74 2c 20 69 6e 63 6c 75 64 69 6e 67 20 66 6f 72 20 47 44 50 52 2c 20 61 6e 64 20 73 75 70 70 6f 72 74 69 6e 67 20 73 75 62 73 63 72 69 70 74 69 6f 6e 73 20 61 6e 64 20 64 6f 6e 61 74 69 6f 6e 73 2e 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 3c 70 3e 54 68 69 73 20 73 65 72 76 69 63 65 20 69 73 20 70 72 6f 76 69 64 65 64 20 6f 6e 20 61 6e 20 22 41 53 20 49 53 22 20 62 61 73 69 73 20 77 69 74 68 6f 75 74 20 77 61 72 72 61 6e 74 69 65 73 20 6f 66 20 61 6e 79 20 6b 69 6e 64 2e 3c Data Ascii: gital Millennium Copyright Act and related international copyright laws, enabling privacy consent, including for GDPR, and supporting subscriptions and donations.</p> <p>This service is provided on an "AS IS" basis without warranties of any kind.<
2024-11-20 02:10:28 UTC	434	IN	Data Raw: 65 73 20 6f 72 20 64 6f 77 6e 6c 6f 61 64 73 20 61 72 65 20 68 6f 73 74 65 64 3c 2f 62 3e 20 61 6e 64 20 61 6c 6c 20 63 6f 6e 74 65 6e 74 20 65 6e 64 70 6f 69 6e 74 73 20 61 6e 64 20 73 65 72 76 69 63 65 73 20 61 72 65 20 63 6f 6e 74 69 6e 75 6f 75 73 6c 79 20 61 6e 64 20 72 6f 75 74 69 6e 65 6c 79 20 73 63 61 6e 6e 65 64 20 66 6f 72 20 61 6e 64 20 61 75 64 69 74 65 64 2e 20 54 68 65 72 65 20 61 72 65 20 6e 6f 20 69 6e 73 74 61 6c 6c 65 72 73 2c 20 73 70 79 77 61 72 65 2c 20 65 78 74 65 6e 73 69 6f 6e 73 2c 20 61 72 63 68 69 76 65 73 2c 20 6f 72 20 6f 74 68 65 72 20 70 6f 74 65 6e 74 69 61 6c 6c 79 20 6d 61 6c 69 63 69 6f 75 73 20 66 69 6c 65 73 20 68 6f 73 74 65 64 20 6f 6e 20 74 68 69 73 20 64 6f 6d 61 69 6e 2e 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 3c Data Ascii: es or downloads are hosted</b> and all content endpoints and services are continuously and routinely scanned for and audited. There are no installers, spyware, extensions, archives, or other potentially malicious files hosted on this domain.</p> <
2024-11-20 02:10:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	104.18.24.111	443	3568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:10:28 UTC	592	OUT	GET /favicon.ico HTTP/1.1 Host: prettylearning.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://prettylearning.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 02:10:28 UTC	620	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:10:28 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 198 Connection: close Cache-Control: public, max-age=3600 expires: Wed, 20 Nov 2024 03:10:28 GMT last-modified: Fri, 18 Oct 2024 13:35:55 GMT strict-transport-security: max-age=15724800; preload timing-allow-origin: * vary: Accept-Encoding x-buildname: hoothoot x-buildnumber: 1528792020 x-datacenter: gce-us-east1 x-hostname: fen-hoothoot-us-east1-chmc via: 1.1 google alt-svc: h3=":443"; ma=86400 CF-Cache-Status: MISS Accept-Ranges: bytes Server: cloudflare CF-RAY: 8e54e75eae46c409-EWR
2024-11-20 02:10:28 UTC	198	IN	Data Raw: 00 00 01 00 01 00 10 10 02 00 01 00 01 00 b0 00 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 01 00 00 00 00 00 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 Data Ascii: (

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49738	104.18.25.111	443	3568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:10:28 UTC	353	OUT	GET /favicon.ico HTTP/1.1 Host: prettylearning.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 02:10:29 UTC	627	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:10:28 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 198 Connection: close Cache-Control: public, max-age=3600 expires: Wed, 20 Nov 2024 03:10:28 GMT last-modified: Fri, 18 Oct 2024 13:35:55 GMT strict-transport-security: max-age=15724800; preload timing-allow-origin: * vary: Accept-Encoding x-buildname: hoothoot x-buildnumber: 1528792020 x-datacenter: gce-us-east1 x-hostname: fen-hoothoot-us-east1-chmc via: 1.1 google alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 0 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8e54e762fe2c43f1-EWR
2024-11-20 02:10:29 UTC	198	IN	Data Raw: 00 00 01 00 01 00 10 10 02 00 01 00 01 00 b0 00 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 01 00 00 00 00 00 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 Data Ascii: (

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49743	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:10:32 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-20 02:10:32 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF4C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=52492 Date: Wed, 20 Nov 2024 02:10:32 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49744	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:10:33 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-20 02:10:33 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=52452 Date: Wed, 20 Nov 2024 02:10:33 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-20 02:10:33 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49745	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:10:39 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=xzUnkZ4GwYzRY4B&MD=3zpw3bkR HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-20 02:10:39 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 9a92d38b-2032-4079-adda-2695f0ed98bd MS-RequestId: 81f89b94-49d3-4c72-a54d-eb46e5a47ba6 MS-CV: aQx6rrHiLEWE1MeD.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Nov 2024 02:10:38 GMT Connection: close Content-Length: 24490
2024-11-20 02:10:39 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-20 02:10:39 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	64445	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:18 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=xzUnkZ4GwYzRY4B&MD=3zpw3bkR HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-20 02:11:19 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: e87360a6-c98a-4a45-adcb-2f5a15d7d9c3 MS-RequestId: f0deab6b-83e7-4fd1-9ccb-60644f07c8f9 MS-CV: uEPkRrRjtEqohFzy.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Nov 2024 02:11:17 GMT Connection: close Content-Length: 30005
2024-11-20 02:11:19 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-20 02:11:19 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	64446	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:18 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:19 UTC	492	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:18 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Tue, 19 Nov 2024 13:10:03 GMT ETag: "0x8DD089B7B2F27B3" x-ms-request-id: 082f1a68-301e-005d-348c-3ae448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021118Z-1777c6cb754gvvgfhC1TEBz4rg00000008zg00000000e9qm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:19 UTC	15892	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-20 02:11:19 UTC	16384	IN	Data Raw: 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 Data Ascii: <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V
2024-11-20 02:11:19 UTC	16384	IN	Data Raw: 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 Data Ascii: 20v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="T
2024-11-20 02:11:19 UTC	16384	IN	Data Raw: 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d Data Ascii: T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F=
2024-11-20 02:11:19 UTC	16384	IN	Data Raw: 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a Data Ascii: alse"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C>
2024-11-20 02:11:19 UTC	16384	IN	Data Raw: 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 Data Ascii: I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="Cleanup
2024-11-20 02:11:19 UTC	16384	IN	Data Raw: 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 Data Ascii: </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R>
2024-11-20 02:11:19 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 Data Ascii: </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C>
2024-11-20 02:11:19 UTC	16384	IN	Data Raw: 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" />
2024-11-20 02:11:19 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 Data Ascii: <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	64451	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:20 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:20 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:20 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: e579fe48-a01e-001e-648c-3a49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021120Z-1777c6cb7542p5p4hC1TEBq09800000008zg000000007auq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:11:20 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	64448	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:20 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:20 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: ac6669be-e01e-003c-668c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021120Z-185f5d8b95csp6jmhC1NYCwy6s00000009m0000000007qym x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:20 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	64449	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:20 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:20 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:20 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 8753231e-501e-008f-038c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021120Z-1777c6cb754j47wfhC1TEB5wrw00000004sg00000000e2ys x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:20 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	64450	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:20 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:20 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:20 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 884d2a23-a01e-00ab-5b8c-3a9106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021120Z-1777c6cb754mqztshC1TEB4mkc000000091g000000005w88 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:20 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	64447	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:20 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:20 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:20 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: f909c6c7-c01e-0049-518c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021120Z-185f5d8b95ckwnflhC1NYCx9qs00000009n000000000k1fw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:20 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	64454	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:20 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:20 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:20 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 1e988f1d-b01e-0070-1b8c-3a1cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021120Z-1777c6cb754gc8g6hC1TEB966c00000008vg00000000mt1g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:20 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	64453	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:20 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:20 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: bfe6cc7a-201e-006e-7e8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021120Z-185f5d8b95cdcwrthC1NYCy5b800000009gg00000000n1qh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:20 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	64455	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:20 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:20 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:20 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 70a275ef-201e-0051-048c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021120Z-185f5d8b95cdh56ghC1NYCk1x400000003bg00000000p6fg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:20 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	64452	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:20 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:20 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 3126d9de-f01e-0099-4d8c-3a9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021120Z-r1d97b99577sdxndhC1TEBec5n000000088000000000kfva x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:20 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	64456	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:20 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:21 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:20 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 7f65a9a1-801e-0067-788c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021120Z-185f5d8b95crwqd8hC1NYCps6800000009e000000000wfm7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:11:21 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	64457	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:21 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:21 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:21 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 79148a84-101e-0017-578c-3a47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021121Z-185f5d8b95c68cvnhC1NYCfn7s00000009kg00000000fcss x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:21 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	64458	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:21 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:21 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: eb1ded04-b01e-0097-298c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021121Z-185f5d8b95c68cvnhC1NYCfn7s00000009p0000000004msq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:21 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	64459	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:21 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:21 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: bdf962e5-c01e-0066-1b8c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021121Z-r1d97b99577d6qrbhC1TEBux5s00000008a000000000dpmk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:21 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	64460	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:21 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:21 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: a1d80e42-301e-0096-338c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021121Z-185f5d8b95crl6swhC1NYC3ueg00000009tg000000004hck x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:21 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	64461	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:21 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:21 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: b82db720-b01e-0053-528c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021121Z-185f5d8b95c96jn4hC1NYCbgp800000009pg000000002261 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:21 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	64462	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:22 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:22 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 7511ce5b-801e-0083-468c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021122Z-r1d97b99577mrt4rhC1TEBftkc000000080g00000000mkxu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:22 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	64464	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:22 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:22 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:22 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 76a157b4-e01e-00aa-258c-3aceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021122Z-r1d97b99577hsvhhhC1TEByb1w00000002dg00000000g6u1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:22 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	64463	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:22 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:22 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b82db7f7-b01e-0053-188c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021122Z-r1d97b99577n4dznhC1TEBc1qw00000008bg000000000twv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:22 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	64465	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:22 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:22 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 302bdaed-601e-003e-338c-3a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021122Z-185f5d8b95crwqd8hC1NYCps6800000009e000000000wfq1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:22 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	64466	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:22 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:22 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: a1cde93a-f01e-0020-638c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021122Z-185f5d8b95c9mqtvhC1NYCghtc00000009rg000000002x2x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:22 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	64467	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:23 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:23 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 0f1ce2f4-701e-0001-5e8c-3ab110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021123Z-1777c6cb7549x5qchC1TEBggbg00000008yg00000000k74u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:23 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	64468	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:23 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:23 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:23 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 107b228c-c01e-00a2-1f8c-3a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021123Z-185f5d8b95cdcwrthC1NYCy5b800000009n0000000006ucu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:11:23 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	64469	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:23 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:23 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 70a27cfc-201e-0051-268c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021123Z-r1d97b99577jlrkbhC1TEBq8d0000000083g000000009tp5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:23 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	64470	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:23 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:23 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 70a27cfa-201e-0051-248c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021123Z-1777c6cb754n67brhC1TEBcp9c00000008yg00000000hmh5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:23 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	64471	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:23 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:23 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 947c7cf8-001e-00a2-018c-3ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021123Z-r1d97b99577mrt4rhC1TEBftkc000000081g00000000esnt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:23 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	64472	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:23 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:23 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: be70ec4e-301e-000c-088c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021123Z-1777c6cb7544n7p6hC1TEByvb4000000092000000000e1hf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:23 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	64473	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:23 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:23 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:23 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 7f65af6f-801e-0067-5f8c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021123Z-185f5d8b95c5lcmhhC1NYCsnsw00000009gg000000010224 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:11:23 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	64474	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:23 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:23 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: c6b0c23f-801e-0048-738c-3af3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021123Z-r1d97b99577tssmjhC1TEB8kan000000086g00000000232d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:24 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	64475	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:23 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:24 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 657669b3-a01e-0002-118c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021124Z-185f5d8b95ckwnflhC1NYCx9qs00000009hg00000000t9sn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:24 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	64476	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:23 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:24 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:24 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 65766a7e-a01e-0002-4f8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021124Z-185f5d8b95c4bhwphC1NYCs8gw00000009m000000000v2ha x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:11:24 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	64477	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:24 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:24 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:24 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 65766a9d-a01e-0002-6d8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021124Z-r1d97b99577n5jhbhC1TEB74vn000000089g00000000042a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:24 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	64478	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:24 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:24 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: fdab78a3-101e-005a-1d8c-3a882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021124Z-r1d97b99577dd2gchC1TEBz5ys0000000840000000002vt7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:24 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	64479	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:24 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:24 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 538c974f-101e-0028-648c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021124Z-185f5d8b95c5lcmhhC1NYCsnsw00000009ng00000000gp1g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:24 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	64481	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:24 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:24 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: f14fa7ac-201e-000c-4a8c-3a79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021124Z-r1d97b99577mrt4rhC1TEBftkc000000080g00000000mm13 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:24 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	64480	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:24 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:24 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: ac667451-e01e-003c-3e8c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021124Z-1777c6cb754lv4cqhC1TEB13us00000008w000000000mdfy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:24 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	64482	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:25 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:25 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:25 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 70a27ff5-201e-0051-4e8c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021125Z-1777c6cb754whff4hC1TEBcd6c00000007kg00000000cqdp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:25 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	64483	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:25 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:25 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: feb02638-401e-0067-7b8c-3a09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021125Z-1777c6cb754xlpjshC1TEBv8cc000000092g00000000d44w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:25 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	64485	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:25 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:25 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:25 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: bfe6d614-201e-006e-7a8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021125Z-1777c6cb754n67brhC1TEBcp9c00000008w000000000sz6b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:11:25 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	64486	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:25 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:25 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: a1d815ed-301e-0096-3f8c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021125Z-r1d97b9957747b9jhC1TEBgyec000000088g00000000gads x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:25 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	64484	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:25 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:25 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: e83eb970-001e-0046-777e-3ada4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021125Z-1777c6cb754ww792hC1TEBzqu400000008s000000000fe66 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:25 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	64487	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:26 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:26 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:26 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 62f36519-501e-0016-468c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021126Z-185f5d8b95ctl8xlhC1NYCn94g00000009kg00000000sgsv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:11:26 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	64488	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:26 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:26 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 7511d71d-801e-0083-6e8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021126Z-r1d97b99577n4dznhC1TEBc1qw000000087000000000cw2w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:26 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	64489	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:26 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:26 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: c1a1e3cb-901e-005b-1f8c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021126Z-185f5d8b95crl6swhC1NYC3ueg00000009ng00000000sf75 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:26 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	64491	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:26 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:26 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:26 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 5b8b83f7-201e-0033-0b8c-3ab167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021126Z-185f5d8b95cp7lkfhC1NYC7rpw00000009u00000000022us x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:11:26 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	64490	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:26 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:26 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: e456cfdf-c01e-0014-248c-3aa6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021126Z-1777c6cb7544nvmshC1TEBf7qc00000008u0000000005vbw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:26 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	64493	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:26 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:26 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: a1cdeef9-f01e-0020-348c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021126Z-1777c6cb7542p5p4hC1TEBq09800000008vg00000000mgbp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:26 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	64494	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:26 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:26 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 0514cbb3-901e-00ac-0281-3ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021126Z-185f5d8b95cjbkr4hC1NYCeu2400000009b000000000qtzn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:27 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	64495	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:26 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:27 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: b82dc135-b01e-0053-1a8c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021127Z-r1d97b9957744xz5hC1TEB5bf8000000086g000000000hcd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:27 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	64497	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:27 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:27 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: bdf96f18-c01e-0066-808c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021127Z-185f5d8b95ckwnflhC1NYCx9qs00000009m000000000mq02 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:27 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	64496	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:27 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:27 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 7511da03-801e-0083-3b8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021127Z-185f5d8b95c95vpshC1NYC759c00000009fg00000000tx89 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:27 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	64498	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:27 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:27 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 7bd180c9-401e-008c-0e8c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021127Z-1777c6cb754mqztshC1TEB4mkc000000090g0000000089gr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:27 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	64499	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:27 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:27 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:27 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 2155a01d-401e-00a3-768c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021127Z-185f5d8b95c96jn4hC1NYCbgp800000009n000000000908a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:27 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	64500	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:27 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:27 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:27 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 5633ff77-c01e-0014-30eb-3aa6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021127Z-r1d97b99577dd2gchC1TEBz5ys000000083g000000004kr6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:11:27 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	64501	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:27 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:27 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 538c9d0d-101e-0028-1c8c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021127Z-185f5d8b95crl6swhC1NYC3ueg00000009mg00000000wy5w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:27 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	64502	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:27 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:27 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:27 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 8e68b2a4-701e-005c-1a8c-3abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021127Z-185f5d8b95cx9g8lhC1NYCtgvc00000001w000000000s366 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:11:27 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	64503	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:28 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:28 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:28 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: f37cb76d-d01e-0017-2085-3ab035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021128Z-1777c6cb7549x5qchC1TEBggbg00000008zg00000000dzwe x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:28 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	64504	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:28 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:28 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:28 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 961908b5-401e-0016-178c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021128Z-185f5d8b95crl6swhC1NYC3ueg00000009ug00000000070c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:11:28 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	64505	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:28 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:28 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: af4852c5-601e-000d-3a8c-3a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021128Z-1777c6cb754xrr98hC1TEB3kag00000008wg0000000017r6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:28 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	64506	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:28 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:28 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 38897a0b-401e-000a-7a8c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021128Z-185f5d8b95cwtv72hC1NYC141w00000009g000000000ecuw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:28 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	64507	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:28 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:28 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 5c70d6ce-001e-00ad-368c-3a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021128Z-1777c6cb754b7tdghC1TEBwwa4000000090000000000kh5e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:28 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	64508	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:29 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:29 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 733c43f5-901e-007b-0e8c-3aac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021129Z-r1d97b99577sdxndhC1TEBec5n000000086g00000000p1a4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:29 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	64509	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:29 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:29 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 0cd4e810-101e-0079-148c-3a5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021129Z-1777c6cb754wcxkwhC1TEB3c6w00000008z0000000000qun x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:29 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	64510	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:29 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:29 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: d35eaebc-501e-0064-178c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021129Z-1777c6cb754ww792hC1TEBzqu400000008w0000000002yyf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:29 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	64511	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:29 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:29 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 495def62-b01e-0098-458c-3acead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021129Z-1777c6cb754gvvgfhC1TEBz4rg00000008y000000000kwpu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:29 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	64512	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:29 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:29 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 9cc78053-901e-008f-7b8c-3a67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021129Z-r1d97b995774zjnrhC1TEBv1ww000000084g00000000d96y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:29 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	64513	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:29 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:29 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: bfe6dbcf-201e-006e-678c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021129Z-1777c6cb754lvj6mhC1TEBke94000000093g000000000yh7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:29 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	64514	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:30 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:30 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 41283c59-801e-0015-058c-3af97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021130Z-185f5d8b95cwtv72hC1NYC141w00000009e000000000qdrt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:30 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	64515	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:30 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:30 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 9cb1ed33-701e-0021-398c-3a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021130Z-r1d97b995778dpcthC1TEB4b54000000083000000000bnu7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:30 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	64516	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:30 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:30 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 5c5a59ff-301e-003f-5b8c-3a266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021130Z-185f5d8b95cmd8vfhC1NYC0g4000000005d000000000qamk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:30 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	64517	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:30 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:30 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 4f8e9926-c01e-00ad-7c8c-3aa2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021130Z-1777c6cb754dqf99hC1TEB5nps00000008p000000000t9pv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:30 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	64518	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:30 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:30 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 38897bff-401e-000a-368c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021130Z-r1d97b99577mrt4rhC1TEBftkc00000007zg00000000n5u2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:30 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	64519	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:30 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:30 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: cb785bac-301e-0000-6c8c-3aeecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021130Z-1777c6cb754gvvgfhC1TEBz4rg00000008x000000000qyh2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:30 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	64521	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:30 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:30 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 26217b89-b01e-001e-808c-3a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021130Z-r1d97b99577jlrkbhC1TEBq8d0000000086000000000284k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:30 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	64522	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:30 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:31 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:30 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 5a5a0c5e-c01e-0079-588c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021130Z-185f5d8b95csp6jmhC1NYCwy6s00000009ng000000001nsa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:11:31 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	64520	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:31 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:31 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:31 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d7880247-601e-0070-328c-3aa0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021131Z-185f5d8b95ctl8xlhC1NYCn94g00000009kg00000000sh3w x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:31 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	64524	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:31 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:31 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:31 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 8e68b69a-701e-005c-5c8c-3abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021131Z-185f5d8b95ckwnflhC1NYCx9qs00000009mg00000000mwgn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:31 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	64525	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:31 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:31 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 47e3bf54-c01e-0082-038c-3aaf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021131Z-185f5d8b95c4vwv8hC1NYCy4v400000009r000000000em1w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:31 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	64526	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:31 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:31 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 6a1e2df9-c01e-008d-338c-3a2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021131Z-1777c6cb754lv4cqhC1TEB13us00000008ug00000000r7u2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:31 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	64527	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:31 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:31 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:31 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 85babd8c-f01e-003f-4e8c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021131Z-r1d97b99577gg97qhC1TEBcrf400000007y000000000nfxz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:31 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	64528	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:31 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:31 UTC	495	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:31 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: c9ccbc18-001e-0014-5cf1-3a5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021131Z-185f5d8b95cwtv72hC1NYC141w00000009hg00000000866f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-20 02:11:31 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	64529	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:32 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:32 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:32 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: d35eb2be-501e-0064-3d8c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021132Z-185f5d8b95cqnkdjhC1NYCm8w800000009bg00000000qx04 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:32 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	64530	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:32 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:32 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:32 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 6d4f85c2-e01e-0003-2b8c-3a0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021132Z-1777c6cb754g9zd5hC1TEBfvpw000000095g000000001ggx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:32 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	64531	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:32 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:32 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:32 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c1a1f15b-901e-005b-358c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021132Z-1777c6cb754wcxkwhC1TEB3c6w00000008yg000000002ast x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:32 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	64532	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:32 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:32 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:32 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 96e0b134-501e-0035-148c-3ac923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021132Z-185f5d8b95cf7qddhC1NYC66an00000009s00000000003es x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:32 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	64534	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:32 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:33 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:33 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: e045c2d1-201e-003c-718c-3a30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021133Z-185f5d8b95cwtv72hC1NYC141w00000009e000000000qdwn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:33 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	64535	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:33 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:33 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:33 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 87533e62-501e-008f-028c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021133Z-r1d97b99577l6wbzhC1TEB3fwn00000008ag00000000ay0h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:33 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	64536	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:33 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:33 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:33 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 96190df9-401e-0016-6a8c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021133Z-1777c6cb754lv4cqhC1TEB13us000000090000000000533f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:33 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	64537	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:33 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:33 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:33 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 07391e4c-a01e-0032-018c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021133Z-1777c6cb754vxwc9hC1TEBykgw00000008z0000000008ums x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:33 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	64533	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:33 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:33 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:33 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 297afce4-701e-0053-438c-3a3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021133Z-185f5d8b95csd4bwhC1NYCq7dc00000009h000000000b21u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:11:33 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	64538	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:33 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:33 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:33 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: c363d3e9-d01e-0028-158c-3a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021133Z-185f5d8b95c4hl5whC1NYCeex000000009h000000000a5d9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:33 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	64539	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:33 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:33 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:33 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: c363d474-d01e-0028-1b8c-3a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021133Z-r1d97b99577tssmjhC1TEB8kan000000085g000000004em6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:33 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	64540	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:33 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:34 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:33 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: f909e935-c01e-0049-358c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021133Z-r1d97b99577hc74hhC1TEBvbns000000084g00000000459u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:34 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	64541	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:33 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:34 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:34 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: df1e4bb0-c01e-0034-6f8a-3a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021134Z-1777c6cb754gc8g6hC1TEB966c00000008zg000000006gz9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:34 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	64542	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:34 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:34 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:34 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 07391f24-a01e-0032-508c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021134Z-185f5d8b95c96jn4hC1NYCbgp800000009f000000000vfyv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:34 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	64543	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:34 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:34 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:34 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: c9275c76-a01e-000d-7b8c-3ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021134Z-185f5d8b95c95vpshC1NYC759c00000009g000000000saq7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:34 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	64544	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:34 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:34 UTC	495	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:34 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: ce1429b8-d01e-005a-2df1-3a7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021134Z-185f5d8b95csp6jmhC1NYCwy6s00000009d000000000wthc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-20 02:11:34 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	64545	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:34 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:34 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:34 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: b47886c8-201e-00aa-0c8c-3a3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021134Z-185f5d8b95cdh56ghC1NYCk1x400000003eg00000000axwx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:34 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	64546	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:34 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:34 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:34 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: eb1e057a-b01e-0097-688c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021134Z-185f5d8b95c68cvnhC1NYCfn7s00000009k000000000k1ma x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:11:34 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	64547	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:35 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:35 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:35 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e2992625-501e-005b-678c-3ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021135Z-1777c6cb754wcxkwhC1TEB3c6w00000008tg00000000mpzq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:35 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	64548	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:35 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:35 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:35 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 073920b7-a01e-0032-4c8c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021135Z-1777c6cb754whff4hC1TEBcd6c00000007eg00000000sghn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:35 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	64549	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:35 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:35 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:35 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 6d560277-a01e-0050-158c-3adb6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021135Z-185f5d8b95c9mqtvhC1NYCghtc00000009k000000000w5y5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:35 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	64550	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:35 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:35 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:35 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 3044792c-001e-005a-088c-3ac3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021135Z-1777c6cb754gc8g6hC1TEB966c00000008yg00000000bhv0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:35 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	64551	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:35 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:35 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:35 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: c9275fb5-a01e-000d-708c-3ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021135Z-1777c6cb754gvvgfhC1TEBz4rg000000090000000000ctnk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:35 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	64552	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:35 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:36 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:35 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 2155ac17-401e-00a3-238c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021135Z-185f5d8b95c9mqtvhC1NYCghtc00000009gg00000000yupr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:36 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	64553	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:36 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:36 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:36 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: c3eb962b-701e-003e-438c-3a79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021136Z-r1d97b99577lxltfhC1TEByw2s000000088000000000b9km x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:36 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	64554	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:36 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:36 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:36 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: c0af4880-401e-00ac-328c-3a0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021136Z-r1d97b99577656nchC1TEBk98c000000085g00000000kcsr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:36 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	64555	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:36 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:36 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:36 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 7ca1e40b-601e-003d-2f8c-3a6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021136Z-185f5d8b95cp7lkfhC1NYC7rpw00000009qg00000000h893 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:36 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	64556	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:36 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:36 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:36 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 62f37542-501e-0016-6f8c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021136Z-r1d97b99577kk29chC1TEBemmg0000000890000000008c9s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:36 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	64557	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:36 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:36 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:36 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 5a5a14b6-c01e-0079-438c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021136Z-185f5d8b95cqnkdjhC1NYCm8w800000009ag00000000vr79 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:36 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	64559	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:36 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:37 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:36 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 538caadb-101e-0028-028c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021136Z-185f5d8b95cmd8vfhC1NYC0g4000000005cg00000000pt5m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:11:37 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	64558	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:36 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:37 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:36 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 5c785bae-401e-0083-638c-3a075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021136Z-185f5d8b95cdtclvhC1NYC4rmc00000009rg00000000bnmk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:37 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	64561	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:37 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:37 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:37 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 7bd1ae59-401e-008c-598c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021137Z-185f5d8b95cx9g8lhC1NYCtgvc00000001zg000000007svg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:37 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	64562	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:37 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:37 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:37 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 21476416-401e-00a3-1c88-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021137Z-185f5d8b95cwtv72hC1NYC141w00000009cg00000000u0re x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:37 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	64563	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:37 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:37 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:37 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 8222e379-801e-008f-078c-3a2c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021137Z-185f5d8b95cjbkr4hC1NYCeu2400000009c000000000qgsq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:37 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	64560	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:37 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:37 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:37 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: f909f157-c01e-0049-018c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021137Z-185f5d8b95cdcwrthC1NYCy5b800000009k000000000dr7z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:37 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	64564	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:37 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:37 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:37 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: bfe6e8fa-201e-006e-3f8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021137Z-r1d97b99577brct2hC1TEBambg0000000200000000001vu6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:37 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	64565	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:37 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:37 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:37 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: b82dd3a8-b01e-0053-0e8c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021137Z-1777c6cb754whff4hC1TEBcd6c00000007gg00000000kcv2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:37 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	64566	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:38 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:38 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:38 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 85bacdce-f01e-003f-758c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021138Z-185f5d8b95cx9g8lhC1NYCtgvc00000001vg00000000ssar x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:38 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	64568	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:38 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:38 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:38 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 5a5a1706-c01e-0079-6c8c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021138Z-185f5d8b95c4bhwphC1NYCs8gw00000009m000000000v3fv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:38 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	64567	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:38 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:38 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:38 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 270c2d5d-601e-00ab-2f8c-3a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021138Z-185f5d8b95crwqd8hC1NYCps6800000009kg00000000cdn5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:38 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	64569	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:38 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:38 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:38 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 073925de-a01e-0032-2d8c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021138Z-185f5d8b95c68cvnhC1NYCfn7s00000009g000000000s092 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:38 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	64570	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:38 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:38 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:38 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: ab7768f3-b01e-0098-59ec-3acead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021138Z-185f5d8b95ctl8xlhC1NYCn94g00000009r0000000005usf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:11:38 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	64571	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:39 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:39 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:39 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 0c3517a5-201e-0003-7a8c-3af85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021139Z-185f5d8b95c9mqtvhC1NYCghtc00000009hg00000000w1uw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:39 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	64572	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:39 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:39 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:39 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 1afac609-801e-00a3-2b8c-3a7cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021139Z-1777c6cb754dqf99hC1TEB5nps00000008rg00000000hpc3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:39 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	64574	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:39 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:39 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:39 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: bfe6eb71-201e-006e-168c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021139Z-185f5d8b95crl6swhC1NYC3ueg00000009n000000000w9ck x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:39 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	64573	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:39 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:39 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:39 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: a16a2ddb-901e-0064-058c-3ae8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021139Z-r1d97b99577brct2hC1TEBambg00000001z0000000004s8t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:39 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	64575	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:39 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:39 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:39 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 4ac405f8-001e-002b-168c-3a99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021139Z-185f5d8b95cdh56ghC1NYCk1x400000003b000000000qp3x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:39 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	64576	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:39 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:39 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:39 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 4e85307b-101e-007a-398c-3a047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021139Z-185f5d8b95cqnkdjhC1NYCm8w800000009fg0000000085ap x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:11:39 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	64577	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:39 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:40 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:40 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 873207a6-301e-001f-2d8c-3aaa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021140Z-185f5d8b95csp6jmhC1NYCwy6s00000009k000000000b0g2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:40 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	64579	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:40 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:40 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:40 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: a615b14a-d01e-008e-6e8c-3a387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021140Z-1777c6cb754mrj2shC1TEB6k7w00000009600000000005f7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:40 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	64578	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:40 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:40 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:40 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: e2992adc-501e-005b-288c-3ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021140Z-r1d97b99577ndm4rhC1TEBf0ps00000008c0000000006ny4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:11:40 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	64580	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:40 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:40 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:40 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 947c99fd-001e-00a2-4d8c-3ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021140Z-185f5d8b95cdh56ghC1NYCk1x400000003ag00000000s64r x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:40 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	64581	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:40 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:40 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:40 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: e9975653-d01e-0065-2d8c-3ab77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021140Z-r1d97b99577n5jhbhC1TEB74vn000000083000000000h9pp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:40 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	64582	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:40 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:40 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:40 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: f390f01b-d01e-0017-588c-3ab035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021140Z-r1d97b99577hsvhhhC1TEByb1w00000002g000000000ace0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:40 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	64584	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:40 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:41 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:41 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 107b52fc-c01e-00a2-5b8c-3a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021141Z-185f5d8b95csp6jmhC1NYCwy6s00000009fg00000000nagg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:11:41 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	64583	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:40 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:41 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:41 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 736e7e4b-801e-0035-118c-3a752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021141Z-1777c6cb754gc8g6hC1TEB966c00000008w000000000mfyw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:41 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	64585	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:41 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:41 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:41 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: e99758fe-d01e-0065-348c-3ab77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021141Z-1777c6cb7542p5p4hC1TEBq09800000008y000000000cc13 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:41 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	64586	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:41 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:41 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:41 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 6d467d74-a01e-0050-5286-3adb6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021141Z-185f5d8b95c4vwv8hC1NYCy4v400000009n000000000sbbt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:41 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	64587	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:41 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:41 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:41 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: f2376ea7-e01e-000c-078c-3a8e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021141Z-1777c6cb754mqztshC1TEB4mkc000000091000000000766x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:41 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	64589	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:41 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:41 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:41 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: 270c322f-601e-00ab-4d8c-3a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021141Z-185f5d8b95cdcwrthC1NYCy5b800000009eg00000000uz31 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:41 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	64588	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:41 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:41 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:41 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: c1a202f8-901e-005b-118c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021141Z-r1d97b99577sdxndhC1TEBec5n000000089000000000fm5g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:41 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	64590	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:11:41 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:11:41 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:11:41 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: c9276c1c-a01e-000d-508c-3ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021141Z-r1d97b9957789g82hC1TEBstx0000000089g0000000000r8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:11:41 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Target ID:	0
Start time:	21:10:19
Start date:	19/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	21:10:25
Start date:	19/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2556 --field-trial-handle=2512,i,4426542172027379820,7800885087021766653,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	21:10:26
Start date:	19/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://prettylearning.com"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: prettylearning.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: prettylearning.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prettylearning.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: prettylearning.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=xzUnkZ4GwYzRY4B&MD=3zpw3bkR HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=xzUnkZ4GwYzRY4B&MD=3zpw3bkR HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: prettylearning.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://prettylearning.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 41

Chrome Cache Entry: 42

Chrome Cache Entry: 43

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 3484, Parent PID: 5324

General

Chronological Activities

Analysis Process: chrome.exePID: 3568, Parent PID: 3484

General

Chronological Activities

Analysis Process: chrome.exePID: 6360, Parent PID: 5324

General

Chronological Activities

Disassembly

Windows Analysis Report
https://prettylearning.com